<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="8555">
<package pkgid="d4458e48e316e4524fe4873137965ed93c2e8d376e68f3135b38615651af3673" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="f370970d5c17b2ab9371a361a42276cbc9b0ea4e9320aa348edd697fc0060763" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="afef98bb5ba7e594a29ed66de627e8c34c847c4de393022bdf674c3a016d511b" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="c32c3b496485775d8a744d99a5967d9b70fa4f63b6402e3780f4a5d1fb615a67" name="389-ds" arch="src">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="ff5ac34cb2c77918d214054e1fa2b7a3d458739c52da26fc1dacb8011a681646" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="df5a823060236012273248ed2948509ec9f277a6ed780b89f872a47777f73267" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="e89ad16ca1242d8c0d5bde02ae78058b115a35b91cde7628ab9a31b71b4bc8c8" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="feaa2b515ec1dcc774827cf398758f6ea2b1c1865fffc7b3675a2565a1445afb" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="d72f1aef7a4b05c658cfc7b95b2d6ef0f4d3da9d034df8e50c5cf0a4964f3c41" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="e2235502f72e408142cf8c2927911132ae33c512f832188ce5904b3d720e2ede" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="b4ad47f6196082d102dfa3da837fb9ad8b7ed44863ca3d85e574347f7f2efcff" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="839cfe398593c21186dcdfea135ddf6edfccc9afeaaf705a3dc2e51c48ecb854" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="e515767538d51a3d06baea450517c2eae9ba879fd900ef7114bc19937b92affd" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.2.8~git17.48834f1" rel="150500.3.5.1"/>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666353601">- Update to version 2.2.3~git20.b1ed566:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 5478 - Random crash in connection code during server shutdown (#5479)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c
  * Issue 5262 - high contention in find_entry_internal_dn on mixed load (#5264)
  * Issue 4324 - Revert recursive pthread mutex change (#5463)</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.2.4~git5.d25f9eb:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Issue 3729 - (cont) RFE Extend log of operations statistics in access log (#5538)
  * Issue 5534 - Fix a rebase typo (#5537)
  * Issue 5534 - Add copyright text to the repository files
  * Bump version to 2.2.4
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 3729 - RFE Extend log of operations statistics in access log (#5508)
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5510 - remove twalk_r dependency to build on RHEL8 (#5516)
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)
  * Issue 5367 - RFE - store full DN in database record</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.2.4~git8.8a6e7be:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
  <changelog author="william.brown@suse.com" date="1673006400">- bsc#1206563 - improve pam_saslauthd migration handling from openldap
- Update to version 2.2.4~git20.7eba9b9:
  * Issue 5526 - RFE - Improve saslauthd migration options (#5528)
  * Issue 5588 - Fix CI tests
  * Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
  * Issue 5521 - UI - Update plugins for new split PAM and LDAP pass thru auth
  * Bump version to 2.2.5
  * Issue 5236 - UI add specialized group edit modal
  * Issue 5278 - CLI - dsidm asks for the old password on password reset
  * Issue 5531 - CI - use universal_lines in capture_output
  * Issue 5505 - Fix compiler warning (#5506)
  * Issue 3615 - CLI - prevent virtual attribute indexing
  * Issue 5413 - Allow mutliple MemberOf fixup tasks with different bases/filters
  * Issue 5561 - Nightly tests are failing</changelog>
  <changelog author="william.brown@suse.com" date="1673438400">- bsc#1205996 - prevent segfault in cl5configtrim
- Update to version 2.2.4~git25.c81ee34:
  * Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
  * Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
  * Fix latest npm audit failures
  * Issue 5599 - CI - webui tests randomly fail
  * Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- bsc#1210462 - OpenLDAP to 389-ds migration - exclude some unsupported attributes.
- Update to version 2.2.6~git40.002a0ca:
  * Issue 5734 - RFE - Exclude pwdFailureTime and ContextCSN (#5735)
  * Issue 5726 - ns-slapd crashing in ldbm_back_upgradednformat (#5727)
  * Issue 5714 - UI - fix typo, db settings, log settings, and LDAP editor paginations
  * Issue 5710 - subtree search statistics for index lookup does not report ancestorid/entryrdn lookups (#5711)
  * Issue 1081 - Stop schema replication from overwriting x-origin
  * Bump webpack from 5.75.0 to 5.76.0 in /src/cockpit/389-console (#5699)
  * Issue 5598 - (3rd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5692)
  * Issue 5598 - (2nd) In 2.x, SRCH throughput drops by 10% because of handling of referral (#5691)
  * Issue 5687 - UI - sensitive information disclosure
  * Issue 4583 - Update specfile to skip checks of ASAN builds
  * Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
  * Issue 3604 - UI - Add support for Subject Alternative Names in CSR
  * Issue 5600 - buffer overflow when enabling sync repl plugin when dynamic plugins is enabled
  * Fix build break
  * Issue 5640 - Update logconv for new logging format
  * Issue 5545 - A random crash in import over lmdb (#5546)
  * Issue 5490 - tombstone in entryrdn index with lmdb but not with bdb (#5498)
  * Issue 5408: lmdb import is slow (#5481)
  * Issue 5162 - CI - fix error message for invalid pem file
  * Issue 5598 - In 2.x, SRCH throughput drops by 10% because of handling of referral (#5604)
  * Issue 5671 - covscan - clang warning (#5672)
  * Issue 5267 - CI - Fix issues with nsslapd-return-original-entrydn
  * Issue 5666 - CLI - Add timeout parameter for tasks
  * Issue 5567 - CLI - make ldifgen use the same default ldif name for all options
  * Issue 5162 - Lib389 - verify certificate type before adding
  * Issue 5630 - CLI - need to add logging filter for stdout
  * Issue 5646 - CLI/UI - do not hardcode password storage schemes
  * Issue 5640 - Update logconv for new logging format
  * Issue 5652 - Libasan crash in replication/cascading_test (#5659)
  * Issue 5658 - CLI - unable to add attribute with matching rule
  * Issue 5653 - covscan - fix invalid dereference
  * Issue 5648 - Covscan - Compiler warnings (#5651)
  * Issue 5630 - CLI - error messages should goto stderr
  * Issue 2435 - RFE - Raise IDL Scan Limit to INT_MAX (#5639)
  * Issue 5632 - CLI - improve error handling with db2ldif
  * Issue 5578 - dscreate ds-root does not normaile paths (#5613)
  * Issue 5560 - dscreate run by non superuser set defaults requiring superuser privilege (#5579)
  * Issue 5624 - RFE - UI - export certificates, and import text base64 encoded certificates
  * Issue 4293 - RFE - CLI - add dsrc options for setting user and group subtrees
  * Issue 5497 - boolean attributes should be case insensitive
  * Bump version to 2.2.6
  * Issue 5607, 5351, 5611 - UI/CLI - fix various issues
  * Issue 5608 - UI - need to replace some "const" with "let"
  * Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
  * Issue 5602 - UI - browser crash when trying to modify read-only variable
  * Issue 5581 - UI - Support cockpit dark theme</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211812 - update for stability patches
- Update to version 2.2.8~git4.1eeaedf:
  * Issue 5642 - Build fails against setuptools 67.0.0
  * Issue 5778 - UI - Remove error message if .dsrc is missing
  * Issue 5751 - Cleanallruv task crashes on consumer (#5775)
  * Issue 5743 - Disabling replica crashes the server (#5746)
  * Bump version to 2.2.8
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5753)
  * Issue 5770 - RFE - Extend Password Adminstrators to allow skipping password info updates
  * Issue 5768 - CLI/UI - cert checks are too strict, and other issues
  * Issue 5765 - Improve installer selinux handling
  * Issue 5643 - Memory leak in entryrdn during delete (#5717)
  * Issue 152 - RFE - Add support for LDAP alias entries
  * Issue 5052 - BUG - Custom filters prevented entry deletion (#5060)
  * Issue 5704 - crash in sync_refresh_initial_content (#5720)
  * Issue 5738 - RFE - UI - Read/write replication monitor info to .dsrc file
  * Issue 5749 - RFE - Allow Account Policy Plugin to handle inactivity and expiration at the same time
  * Bump version to 2.2.7</changelog>
  <changelog author="william.brown@suse.com" date="1689076800">- bsc#1213190 - update for stability patches
- Update to version 2.2.8~git17.48834f1:
  * Issue 5752 - RFE - Provide a history for LastLoginTime (#5807)
  * Issue 5793 - UI - fix suffix selection in export modal
  * Issue 5825 - healthcheck - password storage scheme warning needs more info
  * Issue #5822 - Allow empty export path for db2ldif
  * Issue 5755 - Massive memory leaking on update operations (#5824)
  * Issue 5551 - Almost empty and not loaded ns-slapd high cpu load
  * Issue 5722 - RFE When a filter contains 'nsrole', improve response time by rewriting the filter (#5723)
  * Issue 5755 - The Massive memory leaking on update operations (#5803)
  * Issue 5752 - CI - Add more tests for lastLoginHistorySize RFE (#5802)
  * Issue 2375 - CLI - Healthcheck - revise and add new checks
  * Issue 5781 - Bug handling return code of pre-extended operation plugin.
  * Issue 5646 - Various memory leaks (#5725)
  * Issue 5789 - Improve ds-replcheck error handling</changelog>
</package>
<package pkgid="ba8907f01cdcca595a526ceb39b2b552f33b3ba0287e3c857eee1e3f89e4a878" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="486fa547d1dfcd27525ab2e010f7620b441f05552585c704c160b6bc1a5ab750" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="6a0c103602f3da361ee087fe464ea13c832c1001b2a8ae02b01502aeab7a6f25" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="0685bdbb91ab26b934a48b0e68a1add4e172a16549ecc79512d7905a29f60977" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="14fc3faacc829b417654d075a2d8b98896202c25ef647d559bb4accd5e91174d" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="6756df9ff63f76aac480fb66fe9c6bc2467050419145a26b59b8e096c58e9273" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="bd330a90e7106fc2bc0090a76407b3983826c270bdde3deda8da7735c2af95c2" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="1e7d2d31d538d8b02f6ed7baff9217b3fe4bdbc873e8e47ab5bfe28d0d1737b7" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="c75fcc45cabbf94821bcc2e4d41bd64a72461772ec5eec0ca655ef94941d2321" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="9544077c94617726179c61345f26b3158aaf4024683c9468fd6e92bcc2a7fe3d" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="5acefacb28b0228d26c351bbb22f55ade663c1c222afc6aed1ee25c934d5123e" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="81ae04a9bef9277dd12552ab14a6ff66f47fc390848c1dc5e9d9d5ac89ee622f" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="d7084fd1e22eaca9cb364ff17a8cda0075c250353c722044ef8fe66c8e42415a" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="786bb8d768283fbc08e945b1f4ce456bb23c748260fea5c04ba703fd149fb8c8" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="de347ac6aca5e8800af91e42d3488a2d380d6a672e25cc65bd6b861cb5010445" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="77e81db688e446e82eca548e33968e5e2eaa1bf25463d66eae7ed1365880feb7" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="4ca5070ebdc8e9dd7e595816767c8ca4d319de3add4ec77cc77e5d8cc5a890e5" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="164030a671c2e2da67f622507b2d881909e58f65974841b9d4f4f38ad4b5a2da" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="e97c092c9258b8fb7efa0ea42c3aea81a30b0b909db6da8e974e8f2d3f90225b" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="a153c32f4b559bd10050623f4604e908d1642c40b1f2ed258420dd70003fa47b" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="b72e0e3c97d956ae85185a63e064fd461b49994bf3f89bb18474629b77e60179" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="cfa95f0ae5f93ec21e1811ad24eb187b5dc84a29dab98bb19018d0c4d3070558" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="e8a7c865cab019fc625dd529d5c7e0c28ecc9337f30c4073ab7bfaabbb156ee3" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="1b83fa41b186d53bdc81a1de9870e4fb423f212684f41404cc99d2aa06ea40a6" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="2a6173b2599b39436b8b8139c9437dec5fc0ecb40741253fd3f171b98cde16c4" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="6def71502142103b636b3ddceeb72c62506c8826a73472e24ee2f9d92a728488" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="71b657ff9ca71eaf136c1d140d728fea74b3f822114018204aad7964e13dfc83" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="3e4d133acabbee9b3a7e9ea2b3e8b7b421632faf91be9aa613756639ff5b566f" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="640392b0b5b3158128ffba478f9216b94486f0d5f0a343f7046ab40318285d4d" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f06e731b0781fbec3b3d9079989c80d8fab3e2d94e94bdc12c12f4005603dde2" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="8738edd19cca0877d8bad543804ff5890445d56caf6cfdf32c5bdb46f234e9dd" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f9cba107f36c222e571c4dc472c978781d74d8d9c4e140cd91a20b04423c6e81" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="325ea1fdb729c60ee8e4f8f4c2d6788dd5fb4760560da758ad813a5b01cd1959" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="987409f322c67b18f02f0d3b000d6680fd7cca8c8084cb05e5f7359753990a6c" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="53adddc582e58140927d9f688425e914ae21796c7f2d1be879432c210a521246" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="c91e1d29e8cd0b14f0f257f63d55ad4f8261b9df248df23dffb45f28617cc2a9" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="29c13e89371e218db533ebdaf963eda2a42bdac25e4f63c07d03ea79b3905cc1" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="96db45c41a928304f803fd5e09f530db9ca238cf49c30531bc4e20020fb4269b" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="a753076793e88773dbfe79394c964e51f87367d8b6414962af58b0a6fa1b72da" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="847610414d1717f7b640cbf23fb8d904c0c15f0604b322025eb92e2315832430" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="2c719d796abe6d575a2d07c4eec6c53ee596c886712d8393d915410d828a856d" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="684b2d804af4de52616893d48121629c4ef01ad047316e47140ba0e57697e8e6" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="18b4a9907e65e48042258d941ed24ede8666b0fa2a2bf0d7057cf90817f59cda" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="1dc37e96169105b378c6bc4f416ef73bdfbb0872c84aef7e97225fd37d847361" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="3aeaf54e6d417650a0c1b226a819d06cbf0fc2a4474c88d339554b607daa8d04" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="e19f40cc1958548d2e3bb042c8c940fde4f11dd14adb7a57333bec820820b169" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.24.1"/>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-34474 [bsc#1212237], heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c
  + ImageMagick-CVE-2023-34474.patch</changelog>
</package>
<package pkgid="e650172f967f562a3fae4ec826cb58e14c2a0e94bb7ce669675c6d32bb6f65df" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="2853325f65c7625fe32ff857acd19adc790bf5a0eb2be469a866c39e557027b3" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="c800fbaafc651735011edd6a7ef5a0df8927a69339766feff6a511debe148c14" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="94a8faf168f5b02bcaf7d83ba832c42ebc0c8de01709f5d5c2e1da02a00e8d23" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="b50228f63691b44276eb5224d2dcdd976e5435c281b5d0f93d6259ef1be680c7" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="c10af84d3dc95b91c1607b1bb3383b9d4ae57bb7657a18d7d38636a96402d71d" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="5301291a6cf643d8c35246180b49a29014cce894094250eef3d33797f87036be" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="eab40f8376a97c3c0c9dd8d797cf2b78629150f3956dd7cd1d2116e7c472fcd6" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="00e72d91b637c7792810331b1c2ee2cbbe6d8aa594453a26b6c222d9bc35a75c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="5cd15c45008fecee4a60daf676ca02efddb7d161f25c2041c8763c265bece03c" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="479031f709025f9aafe54ea4a774f8edb83d5f5a97c709bf504d4544ee8182be" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="2c52e5c6386863208d9ae31f068631700b3235204b4600997be8f8bb81e5c682" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="8987923ce6105390263e5e7fc7f5eb9bfdf631aa919ad854a398e24f3c1e0411" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="6e3642cdd8c71fc49d1405930a6dfdefcc8cd9b56c8a814b40eacfaf146c633b" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="5290f045d0652eeeacb400b48c94a6c96904f28ab9bd84bc779b7e474ea07463" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="4bcf495cc4b2143458d5af8886fab630d642dacbf9371b38968df46d35c7ba0d" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="e91dee954c1461a49bfe4c34e93d3fc6ed16e7dc725a86112c2d51a4910736a7" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="afc7cc0c0a5b7e3a7a645e6943b079bc9272b8b3df8fd1ba3dec7f3acd24acc9" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="faad2f70b4a2f388064831ec90eef60edebf130f0e3fe0b674b52c2341586a29" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="c279de2631007b90aa69336dedf89843c8420712d3f24c39435f70c2182aa877" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="d9744dc89aa0d93812545f8aeb72dd0316588ca6f6598084b7197101a1a8d31d" name="MozillaFirefox-branding-SLE" arch="aarch64">
  <version epoch="0" ver="115" rel="150200.9.13.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1688040000">- change version to 115
- Move bookmarks to https</changelog>
</package>
<package pkgid="c47e7c30ff090ff30a661e613dc6840eec5cea44a97d4e4721bf1b67f634b2f0" name="MozillaFirefox-branding-SLE" arch="ppc64le">
  <version epoch="0" ver="115" rel="150200.9.13.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1688040000">- change version to 115
- Move bookmarks to https</changelog>
</package>
<package pkgid="675af853afaa5b842204635e8eaec5bc51816299483eeca15e68214e5088521f" name="MozillaFirefox-branding-SLE" arch="s390x">
  <version epoch="0" ver="115" rel="150200.9.13.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1688040000">- change version to 115
- Move bookmarks to https</changelog>
</package>
<package pkgid="9524ad1df1a1d3d99558798fcd99321c37aee0e486fc6da76845c86b8e5c7a59" name="MozillaFirefox-branding-SLE" arch="src">
  <version epoch="0" ver="115" rel="150200.9.13.1"/>
  <changelog author="pcerny@suse.com" date="1396008000">- show protocol in URL</changelog>
  <changelog author="pcerny@suse.com" date="1402660800">- marked as compatible with Firefox 31</changelog>
  <changelog author="pcerny@suse.com" date="1406808000">- disable call home features</changelog>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1688040000">- change version to 115
- Move bookmarks to https</changelog>
</package>
<package pkgid="645b2716f2c03d4c20cb4fc1f462df4d53d57ec1be6cf1ec6acba014afc2f7e6" name="MozillaFirefox-branding-SLE" arch="x86_64">
  <version epoch="0" ver="115" rel="150200.9.13.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1688040000">- change version to 115
- Move bookmarks to https</changelog>
</package>
<package pkgid="d58bb662f9371f62b5a1def1975060a0cf547499872581f22069fa505be9c763" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="cc17068a3d15c654f79f9c113c1b2a360c0445961b5c8d6062e1e188ffa76ce5" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="15de9d1138150b081aad2cf5b993bf61e55700198d02212487362daad30de0f6" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="a2f85bc9354531b29daa781d516dc35bc6ea4720cd952810deb4ee1cddb0b279" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="4613b2382e6948756f60e75a76b14dfe9a51d158d856de293399c4b521a8bc47" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="735a1e974c8295abc7bbd86d4d6b2b313a6dba32d327c387aa8f1bb9ab2506fb" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="2bbdc0afba8fbcc46a1b6dd802d3c9a4b2f9ef1de414632beb30831879713f24" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="798983d2d60000351fb37bd41d8f57473544ec30dfa6e85863cc98cc8a0b13b2" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="5e69d77a40fd2533dd7bcf5ac1c2333c94d4dce998ae6f7a4278b1410920f4ef" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="bce4c5288b3325d001a791b1c4c4b4f77b3c5dc0c46205278f2cf9391ec10f17" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="22df3456e3fa11ddc901aa70dc3b2ff7a3b743431ca78f87b12579a4b7a78e12" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="c3719518806cb57578efc204d903ab640f7086b0d32a2be0ea7b2743d5c8d996" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="06057414adcc41526ee8b286769db5184e5cc806330f4dbcb82cdb5029c16b2c" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="c06e8f98551de68d03f2a71e158fd5967eea669c16c7ac247136e2f7f1c4ab4a" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="9d62094ecf28ee3de1a4a2faf6fddb6fbb85225742f31b63d1efd279d30e97e1" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="0d702e18215c5ae467b77ddd791bf2a2745e7390af84439dbd19f5756975d1d5" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="bb76eaefdb413468067d7f3ca56cd98b1e57fc2b2b41b6057ee30f83b48763af" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="7a38525cff3347313f6b7a1f3c4ff4d522e8f7994372666cebde6dfa1de2ff6f" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="3503a54c9766340145da2d5b5e53a0ea96fb2a343247e6ff890749aeca87bd44" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="1f487246274eae67d89aa9bc39b6dc033c3bd516a014919346ad661cd11edbf0" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="d48efcbdecfafdf901077132d487a720204729f1b56d06bc64aa8196a8dd4b84" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="1f1d1d34dcc874bddf49e0492726c479c1609aec93824b0832194403326d583a" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="6b55f292646922c6e4e824a3cfd76a608c2ec85797b75b8b70f8ed1a95d83ba2" name="MozillaFirefox-devel" arch="noarch">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="f6dac9f631c92d39e33de6a27ae964d510d5b282b972f053ec4fce2a8ad54017" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="b6f1c5fbb47511a1e8ae2f2e66efb68707873697270e336a5b8ba0809f4051e5" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="dfd6a3dfebf438e1772d66da767f8e90d0f55afd5f20bd349e09bc03931b857c" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="7d3e608135db1e558a22dfa9fb796a9078e0fb9ff9c70de1f6483f1195ab2c09" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="cbd6a32e7511bd66cdd2298d10bde24d0aeb44c23ed95b3fa57c9cb490febc96" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="2c63a412ac8969035ea03b7c1edadcec5b0ece81e2ccb2455b148a20790d1725" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="e20af73408f653bfc1b6fdb4a32b910b9452ecefae9005f9d61a36b1738d859b" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="8cf6147c18185a906184edffee8c9cbccdea9876dbc574f27cd6b1b1570b24c2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="e420d947ac2edbbd6d84a1ba69216795387b0dee17a49a438efcc19b4326e81d" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="2331a08e68e07591873c5b3f297a115c1c7017420d7f39b4b817b0a965f941d3" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="d9b0dd7920bdb480c4981aa7ec46ae87466d13d579d8195b04751421e8d49d86" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="5a1b030da9c61d5886cc035799ffc5784885cc83e774b8245eb5dd7c24e95e02" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="cdda793e7faa0e6b4fb203e338332a2ccf5e706fd1963c30ef8e82e1ef1f97d0" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="11c399e9b3fd41edf116b73a542424c341c4e02ab05ff3d2c22c33f5f84098ff" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="4e721ba6a88ec84f035bb2ea0af2dbcfb2a580d70702fb0caf24f05af7f69a8a" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="3423e6ebbeaa259c2e065391c94982e70296531944428b69f663171c28944ff2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="98d3464236e8d9960c102876a723ffa298073eb3ef71c69b6745db10294286c2" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="cd611c878b498775c87a2a9b90cbcfee99a537edc034474e00cad172495bf0d5" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="c5c0a5edd1a03453d45eb1cf0d1fd61389cf70ef532001e24fcce60045b7e82b" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="e3a9e5c6e7094ebe6e4a2571d14beee03fc6d0528c40b51172602bcac2f7cf87" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="6e4c1cbb92c8424255122513eed7b9159bead928d8b5f320248a37a1f37f8818" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="8aad3f76f0276b99f7c5609ceba69bc51735795bdb9b6385d094b57e48f2c441" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="7aa2ecc55b641fa79374cb8d73876910d7dc8723c6924d90925d4eefb5e7ab5c" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="57b8a04698f786e24ea41cb0586c12a08bc326cce292f5b7c0ddd05948a3707a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.0" rel="150200.152.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1775202.patch, mozilla-bmo1568145.patch
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
</package>
<package pkgid="c4ca15c65b320b391a3ab0484750e74fb1e219ae8c00f87f0d34833eb44267b1" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="d76730b957dad8f15bfe73b1dcff82a241a7bbc900da8c0fa10aba18b4cc353e" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="cb4f2524a1aa2220322ffd94189ac02180ef736729ef73b8ada095ea7c7ca860" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="a2636b0dd7852cc195720e070508d9598575aee2c9482cfe8a5c94059e4f710c" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.0.2" rel="150200.152.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
</package>
<package pkgid="858a702301cd9a3eb9299f4a8b933cc1c4862d8ecdab2cc2fb1adf6a05eca274" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="d94794f35811f656480aee869eed66caeb9b282af051b670f86ee157557b4806" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="73a3e83cbee45569c5dccdabb472b27a3261a351e3b187da2f24899a84498229" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="c0af9fa40c0a8cdea1156a8ed5c187f8d91db70b3c7545d48dd5f1df2afe30fd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="115.1.0" rel="150200.152.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  * Fixed: Various  security  fixes and other quality
    improvements.
  MFSA 2023-19 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Firefox 114 and Firefox ESR
    102.12
- update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1687867200">- Firefox Extended Support Release 115.0 ESR
  * New:
  - Required fields are now highlighted in PDF forms.
  - Improved performance on high-refresh rate monitors
    (120Hz+).
  - Buttons in the Tabs toolbar can now be reached with Tab,
    Shift+Tab, and Arrow keys. View this article for additional
    details.
  - Windows' "Make text bigger" accessibility setting now
    affects all the UI and content pages, rather than only
    applying to system font sizes.
  - Non-breaking spaces are now preserved—preventing automatic
    line breaks—when copying text from a form control.
  - Fixed WebGL performance issues on NVIDIA binary drivers via
    DMA-Buf on Linux.
  - Fixed an issue in which Firefox startup could be
    significantly slowed down by the processing of Web content
    local storage. This had the greatest impact on users with
    platter hard drives and significant local storage.
  - Removed a configuration option to allow SHA-1 signatures in
    certificates: SHA-1 signatures in certificates—long since
    determined to no longer be secure enough—are now not
    supported.
  - Highlight color is preserved correctly after typing `Enter`
    in the mail composer of Yahoo Mail and Outlook.
    After bypassing the https only error page navigating back
    would take you to the error page that was previously
    dismissed. Back now takes you to the previous site that was
    visited.
  - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in
    plain text contexts, such as input and text area.
  - Added an option to print only the current page from the
    print preview dialog.
  - Swipe to navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) on Windows is now
    enabled.
  - Stability on Windows is significantly improved as Firefox
    handles low-memory situations much better.
  - Touchpad scrolling on macOS was made more accessible by
    reducing unintended diagonal scrolling opposite of the
    intended scroll axis.
  - Firefox is less likely to run out of memory on Linux and
    performs more efficiently for the rest of the system when
    memory runs low.
  - It is now possible to edit PDFs: including writing text,
    drawing, and adding signatures.
  - Setting Firefox as your default browser now also makes it
    the default PDF application on Windows systems.
  - Swipe-to-navigate (two fingers on a touchpad swiped left or
    right to perform history back or forward) now works for Linux
    users on Wayland.
  - Text Recognition in images allows users on macOS 10.15 and
    higher to extract text from the selected image (such as a
    meme or screenshot).
  - Firefox View helps you get back to content you previously
    discovered. A pinned tab allows you to find and open recently
    closed tabs on your current device and access tabs from other
    devices (via our “Tab Pickup” feature).
  - Import maps, which allow web pages to control the behavior
    of JavaScript imports, are now enabled by default.
  - Processes used for background tabs now use efficiency mode
    on Windows 11 to limit resource use.
  - The shift+esc keyboard shortcut now opens the Process
    Manager, offering a way to quickly identify processes that
    are using too many resources.
  - Firefox now supports properly color correcting images
    tagged with ICCv4 profiles.
  - Support for non-English characters when saving and printing
    PDF forms.
  - The bookmarks toolbar's default "Only show on New Tab"
    state works correctly for blank new tabs. As before, you can
    change the bookmark toolbar's behavior using the toolbar
    context menu.
  - Manifest Version 3 (MV3) extension support is now enabled
    by default (MV2 remains enabled/supported). This major update
    also ushers an exciting user interface change in the form of
    the new extensions button.
  - The Arbitrary Code Guard exploit protection has been
    enabled in the media playback utility processes, improving
    security for Windows users.
  - The native HTML date picker for date and datetime inputs
    can now be used with a keyboard alone, improving its
    accessibility for screen reader users. Users with limited
    mobility can also now use common keyboard shortcuts to
    navigate the calendar grid and month selection spinners.
  - Firefox builds in the Spanish from Spain (es-ES) and
    Spanish from Argentina (es-AR) locales now come with a built-
    in dictionary for the Firefox spellchecker.
  - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls
    the page instead of zooming. This avoids accidental zooming
    and matches the behavior of other web browsers on macOS.
  - It's now possible to import bookmarks, history and
    passwords not only from Edge, Chrome or Safari but also from
    Opera, Opera GX, and Vivaldi.
  - GPU sandboxing has been enabled on Windows.
  - On Windows, third-party modules can now be blocked from
    injecting themselves into Firefox, which can be helpful if
    they are causing crashes or other undesirable behavior.
  - Date, time, and datetime-local input fields can now be
    cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on
    macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and
    Linux.
  - GPU-accelerated Canvas2D is enabled by default on macOS and
    Linux.
  - WebGL performance improvement on Windows, MacOS and Linux.
  - Enables overlay of hardware-decoded video with non-Intel
    GPUs on Windows 10/11, improving video playback performance
    and video scaling quality.
  - Windows native notifications are now enabled.
  - Firefox Relay users can now opt-in to create Relay email
    masks directly from the Firefox credential manager. You must
    be signed in with your Firefox Account.
  - We’ve added two new locales: Silhe Friulian (fur) and
    Sardinian (sc).
  - Right-clicking on password fields now shows an option to
    reveal the password.
  - Private windows and ETP set to strict will now include
    email tracking protection. This will make it harder for email
    trackers to learn the browsing habits of Firefox users. You
    can check the Tracking Content in the sub-panel on the shield
    icon panel.
  - The deprecated U2F Javascript API is now disabled by
    default. The U2F protocol remains usable through the WebAuthn
    API. The U2F API can be re-enabled using the
    `security.webauth.u2f` preference.
  - Say hello to enhanced Picture-in-Picture! Rewind, check
    video duration, and effortlessly switch to full-screen mode
    on the web's most popular video websites.
  - Firefox's address bar is already a great place to search
    for what you're looking for. Now you'll always be able to see
    your web search terms and refine them while viewing your
    search's results - no additional scrolling needed! Also, a
    new result menu has been added making it easier to remove
    history results and dismiss sponsored Firefox Suggest
    entries.
  - Private windows now protect users even better by blocking
    third-party cookies and storage of content trackers.
  - Passwords automatically generated by Firefox now include
    special characters, giving users more secure passwords by
    default.
  - Firefox 115 introduces a redesigned accessibility engine
    which significantly improves the speed, responsiveness, and
    stability of Firefox when used with:
  - Screen readers, as well as certain other accessibility
    software;
  - East Asian input methods;
  - Enterprise single sign-on software; and
  - Other applications which use accessibility frameworks to
    access information.
  - Firefox 115 now supports AV1 Image Format files containing
    animations (AVIS), improving support for AVIF images across
    the web.
  - The Windows GPU sandbox first shipped in the Firefox 110
    release has been tightened to enhance the security benefits
    it provides.
  - A 13-year-old feature request was fulfilled and Firefox now
    supports files being drag-and-dropped directly from Microsoft
    Outlook. A special thanks to volunteer contributor Marco
    Spiess for helping to get this across the finish line!
  - Users on macOS can now access the Services sub-menu
    directly from Firefox context menus.
  - On Windows, the elastic overscroll effect has been enabled
    by default. When two-finger scrolling on the touchpad or
    scrolling on the touchscreen, you will now see a bouncing
    animation when scrolling past the edge of a scroll container.
  - Firefox is now available in the Tajik (tg) language.
  - Added UI to manage the DNS over HTTPS exception list.
  - Bookmarks can now be searched from the Bookmarks menu. The
    Bookmarks menu is accessible by adding the Bookmarks menu
    button to the toolbar.
  - Restrict searches to your local browsing history by
    selecting Search history from the History, Library or
    Application menu buttons.
  - Mac users can now capture video from their cameras in all
    supported native resolutions. This enables resolutions higher
    than 1280x720.
  - It is now possible to reorder the extensions listed in the
    extensions panel.
  - Users on macOS, Linux, and Windows 7 can now use FIDO2 /
    WebAuthn authenticators over USB. Some advanced features,
    such as fully passwordless logins, require a PIN to be set on
    the authenticator.
  - Pocket Recommended content can now be seen in France,
    Italy, and Spain.
  - DNS over HTTPS settings are now part of the Privacy &amp;
    Security section of the Settings page and allow the user to
    choose from all the supported modes.
  - Migrating from another browser? Now you can bring over
    payment methods you've saved in Chrome-based browsers to
    Firefox.
  - Hardware video decoding enabled for Intel GPUs on Linux.
  - The Tab Manager dropdown now features close buttons, so you
    can close tabs more quickly.
  - Windows Magnifier now follows the text cursor correctly
    when the Firefox title bar is visible.
  - Undo and redo are now available in Password fields.
    [1]:https://support.mozilla.org/kb/access-toolbar-functions-
    using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3
  * _ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w
    [2]:https://support.mozilla.org/kb/how-set-tab-pickup-
    firefox-view
    [3]:https://support.mozilla.org/kb/task-manager-tabs-or-
    extensions-are-slowing-firefox
    [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-
    signing-available-november-21-on-firefox-nightly/
    [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-
    in-firefox-recap-next-steps/
    [6]:https://support.mozilla.org/kb/unified-extensions
    [7]:https://support.mozilla.org/kb/import-data-another-
    browser
    [8]:https://support.mozilla.org/kb/identify-problems-third-
    party-modules-firefox-windows
    [9]:https://support.mozilla.org/kb/how-generate-secure-
    password-firefox
    [10]:https://blog.mozilla.org/accessibility/firefox-113-
    accessibility-performance/
  * Fixed: Various security fixes.
  MFSA 2023-22 (bsc#1212438)
  * CVE-2023-3482 (bmo#1839464)
    Block all cookies bypass for localstorage
  * CVE-2023-37201 (bmo#1826002)
    Use-after-free in WebRTC certificate generation
  * CVE-2023-37202 (bmo#1834711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-37203 (bmo#291640)
    Drag and Drop API may provide access to local system files
  * CVE-2023-37204 (bmo#1832195)
    Fullscreen notification obscured via option element
  * CVE-2023-37205 (bmo#1704420)
    URL spoofing in address bar using RTL characters
  * CVE-2023-37206 (bmo#1813299)
    Insufficient validation of symlinks in the FileSystem API
  * CVE-2023-37207 (bmo#1816287)
    Fullscreen notification obscured
  * CVE-2023-37208 (bmo#1837675)
    Lack of warning when opening Diagcab files
  * CVE-2023-37209 (bmo#1837993)
    Use-after-free in `NotifyOnHistoryReload`
  * CVE-2023-37210 (bmo#1821886)
    Full-screen mode exit prevention
  * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886,
    bmo#1836550, bmo#1837450)
    Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13,
    and Thunderbird 102.13
  * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206,
    bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710,
    bmo#1838587)
    Memory safety bugs fixed in Firefox 115
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch
- Add mozilla-bmo1838323.patch to fix potential SIGILL on old CPUs
  (bsc#1212101)</changelog>
  <changelog author="cgrobertson@suse.com" date="1689076800">- Firefox Extended Support Release 115.0.2 ESR
  MFSA 2023-26 (bsc#1213230)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  - 
  * Fixed: Fixed a startup crash experienced by some Windows
    users by blocking instances of a malicious injected DLL
    (bmo#1841751)
  * Fixed: Fixed a bug with displaying a caret in the text editor
    on some websites (bmo#1840804)
  * Fixed: Fixed a bug with broken audio rendering on some
    websites (bmo#1841982)
  * Fixed: Fixed a bug with patternTransform translate using the
    wrong units (bmo#1840746)
  * Fixed: A security fix.
  * Fixed: Fixed a crash affecting Windows 7 users related to the
    DLL blocklist.
- Firefox Extended Support Release 115.0.1 ESR
  * Fixed: Fixed a startup crash for Windows users with Kingsoft
    Antivirus software installed (bmo#1837242)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690372800">- Remove bashisms from startup-script (bsc#1213657)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690459200">- Firefox Extended Support Release 115.1.0 ESR
  Placeholder changelog-entry (bsc#1213746)
- Remove now upstreamed patch mozilla-bmo1838323.patch and mozilla-bmo1775202.patch</changelog>
</package>
<package pkgid="98adad82248406d5623d2282b8885d029c34c7530241d8e5cd1a9155894dfbe4" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="1f0bbf555af6307300d3d5c39aef8dc5fd47e41387a2d3d82c6ec6b275d1afb2" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="c95728db0b64ac434eda5c2dc7d0a0ac9f0acea51d3b87d1db08fdd36f4090be" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="0fb2681fd2784bf48573919fbf4d100749be7ec4becd6e7ec4b0c3919a895f32" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="b9be22d42d9490deba8f199db6f08fa0b544af0012c67452d733d487eb4b29b7" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="7f95819836f6b62f1126a3ca6d1cfd5d6df502e196171edc736b62289fc42cfb" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="0aee67b20c865d73580d2c029a61a7aa99b9e09527907e7fb7b913dd31e43f82" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="3b8fec5e3eff10e75b16a02b76d52fbf22766f895922672733fe0af21c54eacf" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="77d4907b3d6176c3d89320b5a477f2ef47af4138ad48cc17a07937401d573b20" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="c79612ce44a19176c803bf9656f99cd9286c12a2cf55a55de1bb1cc6c757f55d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="d892148a7324b46aad1476d007228ac4abbef2114fa037a192ba7f2117fd2029" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="3bd4c96d848505302d6029d9de6dcce8e444d749138ef778db8e2c256e8ed104" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="5927f2baff0582dc78319f8003abf48c8da8d2f687115b502ea60b6688c63fb1" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="2d831de5e58717e08360cad7f24dbdc8e31f1bd2c3f13b0dd1bde8f6959237a9" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="55b958ec019a1313f68d4e8e426d67c844f4c6126e8b123b8ac18dd600e302b5" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="fc51ddd9178e8c5c2d99247a10f698f3d3991a34d5a517b14c0883fcf19a5d5a" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="8ca0b0a874e509f0b46a1ea3e03e577ed6a19fa388f1bda824937de1ba12f0d1" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="18acfa29246a3acfbf1b9ae00e770b8898b0c9672a687f1d09bc68307ecdee5d" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="bb2a1aac7b51071730b3b2fb2e331c109e5c5e90bd6af97d4a03e42068550863" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="404ca89e80132abb3d65219149ff408541f36d4a7f2576aaff0e7e9f1202c451" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="ac5dbc40c6ef924f35686b94acccb2f690801c038900230996901b0d31e7f006" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="3a7bc643b24257f5aa4a75d0a576fdb138158d8be9bd5155674931a9f35d5d5b" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="1ac1acf59e97fe913d04d408e56b45315096bce2656044a91a9caaea8bd15c11" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="d571462ae9991221d4ccbabc03eaf1859edef16ed53b54bc6a1f23c88978d345" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="9d1b5395089e20b3588a331268faa17ed31ceb6cbeea9a9c3d1d919ccfe159e5" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="655ffe7442d1cf4e9e00f5266889ae6bfa5f0956f8f42ce38f1a1cf415c24877" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="115.0.1" rel="150200.8.124.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1690286400">- Mozilla Thunderbird 115.0.1
  * changed: Added Thunderbird Supernova branding to about:dialog
    (bmo#1842102)
  * fixed: Message list was not updated when message was deleted
    from server outside of Thunderbird (bmo#1837041)
  * fixed: Scrolling behaved unexpectedly when moving to next
    message unread message in another folder (bmo#1841711)
  * fixed: Scrolling animation was unnecessarily used when
    switching or toggling the sort column in message list
    (bmo#1838522)
  * fixed: Attempting to delete a message and then cancelling the
    action still marked the message as read (bmo#793353)
  * fixed: Unified Toolbar could not be customized under certain
    tabs (bmo#1841480)
  * fixed: Selecting a folder with one or more subfolders and
    pressing enter did not expand folder (bmo#1841200)
  * fixed: Tooltips did not appear when hovering over folders
    (bmo#1839780)
  * fixed: Deleting large amounts of messages from Trash folder
    consumed excessive time and memory (bmo#1833665)
  * fixed: Message Summary header buttons were not keyboard
    accessible (bmo#1827199)
  * fixed: "New" button in Message Filters dialog was not
    keyboard accessible (bmo#1841477)
  * fixed: Backing up secret keys from OpenPGP Key Manager dialog
    silently failed (bmo#1839415)
  * fixed: Various visual and UX improvements
    (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319)
  * fixed: Security fixes
  MFSA 2023-27 (bsc#1212438)
  * CVE-2023-3600 (bmo#1839703)
    Use-after-free in workers
  * CVE-2023-3417 (bmo#1835582)
    File Extension Spoofing using the Text Direction Override
    Character
- Remove obsolete patches mozilla-bmo1568145.patch, mozilla-bmo1005535.patch,
  mozilla-s390x-skia-gradient.patch</changelog>
</package>
<package pkgid="e6f9706dd30badb017f8608145c79002b83696581b78fe1419bb53210db4499a" name="SAPHanaSR-angi" arch="noarch">
  <version epoch="0" ver="1.001.5" rel="150500.3.3.1"/>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-3876)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
</package>
<package pkgid="b9c58754af7ff5e14a36bfcd3d3f7297981be4d70ebfb5462004ec4efe6480d0" name="SAPHanaSR-angi" arch="src">
  <version epoch="0" ver="1.001.5" rel="150500.3.3.1"/>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
  <changelog author="abriel@suse.com" date="1681732800">- New package name and new version 1.001.4
  * New package SAPHanaSR-angi
    SAP HANA System Replication - A New Generation Interface
    (jsc#PED-3876)
  * support SAPHana ScaleUp and ScaleOut environments with one
    set of resource agents
- conflicting with the 'old' packages SAPHanaSR and
  SAPHanaSR-ScaleOut
- old changelog entries preserved for history reasons as
  SAPHanaSR-angi is based on all these changes.</changelog>
  <changelog author="abriel@suse.com" date="1688558400">- Version bump to 1.001.5
  * package is still in status 'technical preview'
  * add support for SAPHana ScaleOut environments without standby
    nodes
  * starting to rewrite SAPHanaSR tools from bash to python.
    SAPHanaSR-showAttr and SAPHanaSR-replay-archive
    The name of the tools is not changed by this action, but there
    are some improvements in functionality. See the man pages for
    details.
    The tools SAPHanaSR-monitor and SAPHanaSR-filter are deprecated.
    The classic version of these tools is still shipped in the
    package side-by-side to the rewritten and more powerful
    tools in /usr/bin. Their name is suffixed by '-legacy'.
    The classic version of the tools is deprecated and will be
    removed in a later package update.</changelog>
</package>
<package pkgid="5fedb02dc61c4681c36029717c8d4498053b768562b043a94b5fee2553785ef8" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="03cdbabe0ae2444252ce0b42fe3ab41286af4341b100194734930291717fe092" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="5c584baaff5c7a90f4e553fbd7637a513f01d1e245028c770de36579fdff467b" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="bbf9aa46f6ae53e1e14ee1fc0c9734d0af8a3c06b518246cba37d8359d92e40c" name="accel-config" arch="src">
  <version epoch="0" ver="4.0" rel="150500.3.3.1"/>
  <changelog author="mcalabkova@suse.com" date="1600776000">- Initial packaging of v2.8 (jsc#SLE-15021)</changelog>
  <changelog author="lpechacek@suse.com" date="1613131200">- Update to v3.0.1 (jsc#SLE-13348)
  - Added IAX support
  - Added implementation and support for new mdev types
  - Removed uuid type mdevs
  - Introduced a new wq API to set max batch and transfer size
  - Added new GPL2 and LGPL-2.1 license files
  - Library license changed to LGPL-2.1
  - Fixed static code analysis bugs
- Enhanced Description
- Added dependency on the idxd kernel driver
- Restricted architecture to x86 - DSA is embedded
  into Intel CPUs
- Added patch: v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 3.1
  * Improved error messages and return values
  * Fix incorrect error return value from tool
  * Allow -1 special value for wq-&gt;groupid and fix related error
    messages
  * Fix incorrect manpage text for config-wq
  * Remove reference to non-interface header in interface header
  * Remove non-interface header from packaging
  * Use portable data types and fix build issues in 32 bit targets
- Dropped upstream merged v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1624968000">- Update to version 3.2
  * Add support for new device bind paths retaining compatibility
    with older kernels
  * Add support for UACCE interface to access char devices
  * Fixed several issues in filtering, config and listing code
  * Support all 256 bits of op_cap
  * Fix incorrect return values
  * Made removing all mdevs more intuitive</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to version 3.4.1
  * Bug fixes related to traffic-class
  * Add per-wq ATS disable support
  * Add extended error status reporting
  * Created local copy of UAPI header file idxd.h from /usr/include
  * Update driver name changes
  * Rewrite unit test removing hardcoding and other enhancements
  * Bug fixes
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- Update to version 3.4.2
  * Add feature to skip tests based on feature availability
  * Skip tests requiring shared memory if feature not available
  * Add API to retrieve wq occupancy attribute</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Update to version 3.4.4:
  * Add -e/--enable and -f/--force features to load-config command
  * Add more sample configuration files for different usages
  * Add multi-descriptor support
- Update to version 3.4.3:
  * Remove redundant dependencies (kmod and udev)
  * Bug fixes and code cleanup
  * DSA test adds device and wq selection
  * DSA test adds no opcode operation support</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648641600">- Update to version 3.4.6.2:
  * Allow driver_name to be configured in guest
  * Disable mdev tests
  * Update driver_name in unit test configs
  * Improve error message in config attr failures
- Update to version 3.4.6.1:
  * Bug fix in wq driver name configuration
  * Test configs add driver name attr
- Update to version 3.4.6:
  * Support new "read_buffer" attributes that replace "token" attributes
  * Deprecate attributes with "token" names
  * Add support for driver_name attr to get wq driver name
  * Fix a read buffer length related bug
  * Add opcode operation support
- Build exclusively on x86_64, as kernel module idxd.ko cannot be
  found on i586</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update to version 3.4.6.3:
  * Allow use of config files with driver_name attr with older drivers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652702400">- Update to version 3.4.6.4:
  * Init IAA test and add No-op operation
  * Separate common codes from DSA source code file
  * Bug fixes</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="jcheung@suse.com" date="1686139200">- Submit version 4.0 to fulfill the requirement of jsc#PED-3850
  (ECO:jsc#PED-4480)</changelog>
</package>
<package pkgid="327a2102787a07431a81df7497340ad4ce8524ff0c506718fa228c8d87b35e3e" name="accel-config" arch="x86_64">
  <version epoch="0" ver="4.0" rel="150500.3.3.1"/>
  <changelog author="mcalabkova@suse.com" date="1600776000">- Initial packaging of v2.8 (jsc#SLE-15021)</changelog>
  <changelog author="lpechacek@suse.com" date="1613131200">- Update to v3.0.1 (jsc#SLE-13348)
  - Added IAX support
  - Added implementation and support for new mdev types
  - Removed uuid type mdevs
  - Introduced a new wq API to set max batch and transfer size
  - Added new GPL2 and LGPL-2.1 license files
  - Library license changed to LGPL-2.1
  - Fixed static code analysis bugs
- Enhanced Description
- Added dependency on the idxd kernel driver
- Restricted architecture to x86 - DSA is embedded
  into Intel CPUs
- Added patch: v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 3.1
  * Improved error messages and return values
  * Fix incorrect error return value from tool
  * Allow -1 special value for wq-&gt;groupid and fix related error
    messages
  * Fix incorrect manpage text for config-wq
  * Remove reference to non-interface header in interface header
  * Remove non-interface header from packaging
  * Use portable data types and fix build issues in 32 bit targets
- Dropped upstream merged v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1624968000">- Update to version 3.2
  * Add support for new device bind paths retaining compatibility
    with older kernels
  * Add support for UACCE interface to access char devices
  * Fixed several issues in filtering, config and listing code
  * Support all 256 bits of op_cap
  * Fix incorrect return values
  * Made removing all mdevs more intuitive</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to version 3.4.1
  * Bug fixes related to traffic-class
  * Add per-wq ATS disable support
  * Add extended error status reporting
  * Created local copy of UAPI header file idxd.h from /usr/include
  * Update driver name changes
  * Rewrite unit test removing hardcoding and other enhancements
  * Bug fixes
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- Update to version 3.4.2
  * Add feature to skip tests based on feature availability
  * Skip tests requiring shared memory if feature not available
  * Add API to retrieve wq occupancy attribute</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Update to version 3.4.4:
  * Add -e/--enable and -f/--force features to load-config command
  * Add more sample configuration files for different usages
  * Add multi-descriptor support
- Update to version 3.4.3:
  * Remove redundant dependencies (kmod and udev)
  * Bug fixes and code cleanup
  * DSA test adds device and wq selection
  * DSA test adds no opcode operation support</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648641600">- Update to version 3.4.6.2:
  * Allow driver_name to be configured in guest
  * Disable mdev tests
  * Update driver_name in unit test configs
  * Improve error message in config attr failures
- Update to version 3.4.6.1:
  * Bug fix in wq driver name configuration
  * Test configs add driver name attr
- Update to version 3.4.6:
  * Support new "read_buffer" attributes that replace "token" attributes
  * Deprecate attributes with "token" names
  * Add support for driver_name attr to get wq driver name
  * Fix a read buffer length related bug
  * Add opcode operation support
- Build exclusively on x86_64, as kernel module idxd.ko cannot be
  found on i586</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update to version 3.4.6.3:
  * Allow use of config files with driver_name attr with older drivers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652702400">- Update to version 3.4.6.4:
  * Init IAA test and add No-op operation
  * Separate common codes from DSA source code file
  * Bug fixes</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="jcheung@suse.com" date="1686139200">- Submit version 4.0 to fulfill the requirement of jsc#PED-3850
  (ECO:jsc#PED-4480)</changelog>
</package>
<package pkgid="6c747d46da79d0a29b1eb37ade3cd8ad5af34934304a761440aa47664461b050" name="accel-config-devel" arch="x86_64">
  <version epoch="0" ver="4.0" rel="150500.3.3.1"/>
  <changelog author="mcalabkova@suse.com" date="1600776000">- Initial packaging of v2.8 (jsc#SLE-15021)</changelog>
  <changelog author="lpechacek@suse.com" date="1613131200">- Update to v3.0.1 (jsc#SLE-13348)
  - Added IAX support
  - Added implementation and support for new mdev types
  - Removed uuid type mdevs
  - Introduced a new wq API to set max batch and transfer size
  - Added new GPL2 and LGPL-2.1 license files
  - Library license changed to LGPL-2.1
  - Fixed static code analysis bugs
- Enhanced Description
- Added dependency on the idxd kernel driver
- Restricted architecture to x86 - DSA is embedded
  into Intel CPUs
- Added patch: v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 3.1
  * Improved error messages and return values
  * Fix incorrect error return value from tool
  * Allow -1 special value for wq-&gt;groupid and fix related error
    messages
  * Fix incorrect manpage text for config-wq
  * Remove reference to non-interface header in interface header
  * Remove non-interface header from packaging
  * Use portable data types and fix build issues in 32 bit targets
- Dropped upstream merged v3.0.1-use-portable-data-types.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1624968000">- Update to version 3.2
  * Add support for new device bind paths retaining compatibility
    with older kernels
  * Add support for UACCE interface to access char devices
  * Fixed several issues in filtering, config and listing code
  * Support all 256 bits of op_cap
  * Fix incorrect return values
  * Made removing all mdevs more intuitive</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631188800">- Update to version 3.4.1
  * Bug fixes related to traffic-class
  * Add per-wq ATS disable support
  * Add extended error status reporting
  * Created local copy of UAPI header file idxd.h from /usr/include
  * Update driver name changes
  * Rewrite unit test removing hardcoding and other enhancements
  * Bug fixes
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633694400">- Update to version 3.4.2
  * Add feature to skip tests based on feature availability
  * Skip tests requiring shared memory if feature not available
  * Add API to retrieve wq occupancy attribute</changelog>
  <changelog author="danilo.spinella@suse.com" date="1640865600">- Update to version 3.4.4:
  * Add -e/--enable and -f/--force features to load-config command
  * Add more sample configuration files for different usages
  * Add multi-descriptor support
- Update to version 3.4.3:
  * Remove redundant dependencies (kmod and udev)
  * Bug fixes and code cleanup
  * DSA test adds device and wq selection
  * DSA test adds no opcode operation support</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648641600">- Update to version 3.4.6.2:
  * Allow driver_name to be configured in guest
  * Disable mdev tests
  * Update driver_name in unit test configs
  * Improve error message in config attr failures
- Update to version 3.4.6.1:
  * Bug fix in wq driver name configuration
  * Test configs add driver name attr
- Update to version 3.4.6:
  * Support new "read_buffer" attributes that replace "token" attributes
  * Deprecate attributes with "token" names
  * Add support for driver_name attr to get wq driver name
  * Fix a read buffer length related bug
  * Add opcode operation support
- Build exclusively on x86_64, as kernel module idxd.ko cannot be
  found on i586</changelog>
  <changelog author="rpm@fthiessen.de" date="1650542400">- Update to version 3.4.6.3:
  * Allow use of config files with driver_name attr with older drivers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652702400">- Update to version 3.4.6.4:
  * Init IAA test and add No-op operation
  * Separate common codes from DSA source code file
  * Bug fixes</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663156800">- Update to version 3.4.7:
  * No relevant changes
- Update to version 3.4.6.5:
  * Add Zcompress32, Zdecompress32, Compress and Decompress test
  * Add Zcompress16 and Zdecompress16 to IAA test
  * Add operation CRC64 into IAA test
  * Bug fixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1665403200">- Update to 3.4.8
  * Changes in accel-config test</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to version 3.5.0:
  * Fix static code analysis warnings
  * Fix lintian errors
  * Move test program and related configs to /usr/lib
  * Move contrib/configs/* to /etc
  * Some code cleanup</changelog>
  <changelog author="rpm@fthiessen.de" date="1672142400">- Update to version 3.5.2:
  * Bug fix in help system
  * Remove mdev implementation</changelog>
  <changelog author="danilo.spinella@suse.com" date="1682683200">- Update to version 4.0:
  * use buildflags.mk, remove hardcoded CFLAGS
  * debian/accel-config-test.install fix path on copy
  * convert all magic number for 1&lt;&lt;12 to PAGE_SIZE
  * fix madvise() call to unmap pages
  * add updated idxd.h definition from kernel source
  * Remove redundant -f 0x0 in iaa_user_test_runner.sh
  * Fix dedicated mode wq size 1 failure
  * Modify incorrect print information
  * Modify block_on_fault in 2g2q_user_2.conf
  * Move get_random_value() to accel_test.c
  * Add algorithm to do Zcompress8
  * Add test code of operation Zcompress8
  * Modify script for executing Zcompress8 test
  * Add algorithm to do Zdecompress8
  * Add test code of operation Zdecompress8
  * Modify script for executing Zdecompress8 test
  * Add algorithm to do both Encrypt and Decrypt
  * Add test code of operation Encrypt
  * Modify script for executing Encrypt test
  * Add test code of operation Decrypt
  * Modify script for executing Decrypt test
  * Modify struct in idxd.h for IAA Translation Fetch
  * Add test code of IAA Translation Fetch
  * Modify script for executing IAA Translation Fetch test
  * Add helping information for new parameters
  * Add openssl package installation details
  * Fix bug of Zcompress8 about input size less 128
  * Remove ats_disable config for iax tests
  * Add identification for IAA1.0/2.0 platform
  * add per-wq prs disable tests
  * Update format bitmask attrs to match driver
  * Add new API to set and get wq op_config
  * Add option to config-wq to set op_config
  * Change json listing format of bitmasks
  * Add load, save and list config support for op_config
  * Update config-wq doc with op_config details
  * Add unit test for op_config configuration
  * Fix segmentation fault during list cmd in SPR
  * Add API to retrieve iaa_cap when available
  * Add group-&gt;desc_progress_limit support
  * Add group-&gt;batch_progress_limit support
  * Add wq-&gt;prs_disable support
  * Add device-&gt;event_log_size support
  * Do not set traffic class in tests
  * Skip op_config test if feature not present
  * Include IAA support in README
  * Fix bug in return value of pasid enabled check
  * add DIX Generate operation support
  * add translation fetch operation support
  * Remove traffic config for iax tests
  * Fix dsa_test segmentation fault when do 2G tests
- Update to version 3.5.3:
  * Fix bug of setting max destination size
  * Remove some leftover references to mdev
  * Remove text about installing kernel headers
  * Remove uninitialized local variable warning
  * Remove read_buffers 0 settings from configs</changelog>
  <changelog author="jcheung@suse.com" date="1686139200">- Submit version 4.0 to fulfill the requirement of jsc#PED-3850
  (ECO:jsc#PED-4480)</changelog>
</package>
<package pkgid="8e26c65cbaefb20c8fbbede79a3ec83124649622b3004b19aa052876324ac3fe" name="amazon-ecs-init" arch="aarch64">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="d258ac5eac4917e60ab228ae77ff808f511aafed3efa64ba67a3a668d3641c43" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="0e8fdc822306ada884160b6cfffedf53f03b252780b100b775982001f5b70ea6" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="ad01fa649cc17979282501692f29d1a275dea4a0484ca402bf452b768977df81" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="5e6c8ba27a75dc51318c6ade02eda2cedf326ce9b360d816e00d1588713ce757" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="740d2f8171a1c67abc75a17da0d1abe84bb265e07f639f327c43bb08c0427296" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="03e0d74b98604a81e054887569cfa69bcf704b8243612863a496b8cd951b5b12" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="a97e94eab5d2bd51bc42590f34357e84afd0a4b6adcce5151448779bed5c60fa" name="apache-commons-fileupload" arch="src">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.0 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="jsmeix@suse.de" date="1129636800">- Current version 1.0 from JPackage.org</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1158926400">- don't use icecream
- use target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.1.1</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382011200">- fix bnc#846174/CVE-2013-2186: null byte injection flaw
  http://svn.apache.org/viewvc?view=revision&amp;revision=1507048
  * jakarta-commons-fileupload-CVE-2013-2186.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1382097600">- remove gcj part and deprecated macros</changelog>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="62b131090fba68b961a56a9c2772b7657677e480935142437a235952074638e2" name="apache-commons-fileupload-javadoc" arch="noarch">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="41f9b863f1501b68f9d5e159304251634995c5bd0b41938b8af9e39c4c266eb8" name="apache-parent" arch="noarch">
  <version epoch="0" ver="28" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
</package>
<package pkgid="a6711071424783d1f8c4b6d1d4dd1ba27c3a485f61338168fa19cd77a4ae2c86" name="apache-parent" arch="src">
  <version epoch="0" ver="28" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
</package>
<package pkgid="bede83ad34c3ebd7db47bc086ba0d93b7b8f02cd91230807e82b2e95fa891fc1" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.33" rel="150400.4.25.1"/>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
</package>
<package pkgid="761b33b8e1fc7f8c2b466cfa17f0cc8124cc21f5f25d2c109153bfd1756e3459" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.33" rel="150400.4.25.1"/>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
</package>
<package pkgid="54ae313a41d2b76bb91f9097a4d366a1e8736b23e7fccafcada1a6304ef67799" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.33" rel="150400.4.25.1"/>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
</package>
<package pkgid="22596b4b96e769dad0fd66731d7d588e3588b45f96522fa8d77ebee770189d55" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150400.4.25.1"/>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
</package>
<package pkgid="708b0a76bc9f9ff6c5562ce372442a7e36b81ba4e9c810964f7e2a05dee39567" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150400.4.25.1"/>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1676635200">- security update
- added patches
  fix CVE-2023-0568 [bsc#1208366], NULL byte off-by-one in php_check_specific_open_basedir
  + php7-CVE-2023-0568.patch
  fix CVE-2023-0662 [bsc#1208367], DoS vulnerability when parsing multipart request body
  + php7-CVE-2023-0662.patch
  https://github.com/php/php-src/commit/a92acbad873a05470af1a47cb785a18eadd827b5, relates to CVE-2023-0567 [bsc#1208388]
  + php7-crypt-possible-buffer-overread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v19.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1679400000">- security update
- added patches
  fix CVE-2022-4900 [bsc#1209537], potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable
  + php7-CVE-2022-4900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- security update
- added patches
  fix CVE-2023-3247 [bsc#1212349], Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP
  + php7-CVE-2023-3247.patch</changelog>
</package>
<package pkgid="26b0cabe85ad9a08242798d8f8b243a577560fe2e98736f666d48ddc7ef3712d" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f19ad64e27d62220dba8a5f9f481b3f8aa92d944ff394c417f07c6724cabc919" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a2c8216686dbbe6725d288c19ddf447dcebce9b066a732d7e5796af99c1105c7" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="730410db1b370943e807c045c7caf1483b0dbd963b5a871ded66ccc005da2b0d" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="70faa26c5aa96672c87d7614bd5fce066c640d2315b41365eda037f00538265d" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e1f091b42709290c5e52a08f12d1dd24cf4eaa06d5afb9024940db76f392a99b" name="atkmm1_6" arch="src">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1304164800">- Update to version 2.22.5:
  + bgo#645669: Install the m4 files even without
  - -enable-maintainer-mode, as with other modules.
- Use source services: download_url and set_version.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310040000">- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add atkmm-devel to baselibs</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 2.22.6:
  + Add #includes needed with the latest glibmm.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="771d6a730d2fe5d0b06832afdd860016d27d854aaeed40b1a5e9df22eff2c9f4" name="atkmm1_6-devel" arch="aarch64">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="e959361af7585cdaa8386b95f7fed9841dc6dd54d76548858f7de3649aa2b054" name="atkmm1_6-devel" arch="ppc64le">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="5b1c497b04b2cb2fa994004109729b94eaa6cfea768ccad4ddd3b5b37b7c7d2e" name="atkmm1_6-devel" arch="s390x">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="29066d54492a9b24d9bda058a7ad8396b92a712c36acb234f9ccbf93a4c20e82" name="atkmm1_6-devel" arch="x86_64">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="67c08b4d280e5d7e9d224585c749d5afa41518262bc78afd2d88e74e4445d9b2" name="atkmm1_6-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.28.3" rel="150400.4.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add atkmm1_6-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libatkmm-1_6-1/NEWS
  (bsc#1209094,bsc#1209139).</changelog>
</package>
<package pkgid="f7b5fbbea0660dfb07d9d48fc18ede4554ef54097e861bc808ef3fd44908bcd4" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="7b6c164bda30ff7483dc2e515fff514df808a6e437bc9cd5b7403aaf42255f30" name="audit" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="ca7c1876560637d148b184b8fc5f374aa6be375e9eb4b35250582cca39b37b44" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="5ad9e23d83bafa093f98d0e771d5d108ff734cff6c5db40f092960f68799bc35" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="04a80f48d1c763c169d388d78c77f61ca32ddc7599c0e99fa870ace0643b49e4" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="99bd839961c13e3c94693c256b4b3ede2c15dbaac88723c9666650e2656ac20c" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="aecb8cc2978245a0b968f838364cda56d07a4af09418024dbe572ea5ffac1043" name="audit-audispd-plugins" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2c06ada0068df07438fbe19307f87598f85a06deb62be516e620d56647b54812" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2385df899829618e17bc21ff8cf8c1a8a7c1a67f3b925d36aaa66445ecf6aafb" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="fdcb71b23e2088058d27fbd84452c518316a2539690b42d3e9ca0479fdc322a3" name="audit-devel" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="dee0619e339a0212d20480c9691a3ede0e2ef7b2e4a27ed36db01db0d86f2716" name="audit-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="996b9a7e657251aae0fea3b9d1b5eac8d9daddcb5613cbc5f14b07ffa36a767f" name="audit-devel" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="15a9d8904d85d758668249beb567942edb46c8a0538bd9e9f64a3e2d8a9fdfda" name="audit-devel" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="5ed3dfe01b8c87dc3d3e6940e234eaa9c3376cc3512e9a234910f4a6b0e0c20e" name="audit-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="d8a0bcc54c1b3565dcd21bf0712a99469bedf1636a5f4e6656063d8cae1a09fc" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="a31555b2425285826b2aeb5d2ee848c1605b2896bc62b465fef62d79147543b5" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="150500.3.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="lslezak@suse.cz" date="1649246400">- Bump version to 4.5.0 (bsc#1198109)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.5.2</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.5.3</changelog>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
</package>
<package pkgid="1f470c213083b4116514045986969498506a58083494fead40495439e2a1e323" name="autoyast2" arch="src">
  <version epoch="0" ver="4.5.14" rel="150500.3.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="lslezak@suse.cz" date="1649246400">- Bump version to 4.5.0 (bsc#1198109)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.5.2</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.5.3</changelog>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
</package>
<package pkgid="07e74b1139be9f9ad94f53945fb2b04276ffebb84bf3be962dbbacd4372c485b" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="150500.3.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="lslezak@suse.cz" date="1649246400">- Bump version to 4.5.0 (bsc#1198109)</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.5.2</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.5.3</changelog>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
</package>
<package pkgid="94f4decd2a1cc13096124c4962e77e4746c08c1aa2ae57abe13f604bf41d4fc5" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="f084d501f27d145d6409e1e342f65f935f84375189e48a00145c883672578e9b" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="f602378dde75daaf3b496600e72e3dd7e6fed824e852f8bbad48da4188f49902" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="9bbb4ab5e4332147e0bb323c2653259bfcbb117754fad67e94df035ecf1546ce" name="bind" arch="src">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="b635ec622f5d480880d491eb9bf62b5a02aa77640985adfc6e4344e149c19195" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="e1810d071ff7680fd48a4f7045607fb5ff2b5749759c81ca41f51165d5934a13" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="538da66b6e081314f582e49e26a7d0b249afbcb850de3f48e5c8de3002840692" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="878ae4eba4501805252b18283ff4cfc927a13b494b1e50867aaa6c4077397b85" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="692a7ac0be4cc6bf52266c17e5a36b3d480ff8cbcd56da284c15af9c3c205b01" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="2bd012abba97565e4694753a5dac2cfa43d5a5222359aec73f9f9769320891f6" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.42" rel="150500.8.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
</package>
<package pkgid="2e3898384212444cf57135f08e62bb32c681be752aec212d5f0fb25894be6ab1" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="4b63e40917582daa59c94d49018c3e03649b7c1d0edaae04c0ffddc3bbedc773" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="a3de1a148a8286fd6955e56797455bbc6d9a0f0da613d13fc540ffd125b143aa" name="bluez" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="10e64251d9e34aa1af7be26e6aa72cc2728504728209a708d766a4ccb6569a83" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="1d95f770326e7f2d137d01e65cad22c728c6eb6edb7949141eabb93c9e3903cf" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="23178e420b4a9fec2d79143640cf835144ce2cec42a1bbfd59730da65b9800e6" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="84b3b6cbeedd4a3c7207ada6a3bee8bd57e11442127331c0ff94de2caae59734" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="693d7609046a9d2a7ceaf22fba6cbb3b0623eea521c53982fb8bc596b7e6f9e0" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="57f3e8d56442f3c8233020210854376dd08415bd0d205d08a33de5dfce2c115e" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="33c4fb07a6bcb1ae42dc03b834210d47942f4058e39eabf69b3d59effb0182e7" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="fdf66750c5b9cb1726f489d8bdf78e7a9a93f59bcff13e5909d645321f5ec440" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="f152f63ba1990969cc215c1d797d515b2feccffe0e0187cd248c507fee7e0e6d" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="ac4f202373d00d609de1390918dc1156c3499aa838e43b3af12c676fa05023b4" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="896462c2993c413f176b805a08d081c9d1b3394c21bd74b66b90f2d7204b3a58" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="7a7746de4cbffda0868853e19e10d755e7eabd8daec273e8650345a7d0b91fd1" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="e1dc876501448fd7affa06526dd2f26595a8596aee6e0ee9e05e0d65b19caf3e" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="b8fd6e32bc5081bcd7a4bb6a1a3cc994629c71bd03b372c3bcbab740518cdbed" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="0ba3936a308e93da6954eef6bd7762e67d726755d32ecea214ecf0dc94faf163" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="2a897141534a51ae424233a2f680b03b6970121d5e1d11ea5f4f0b88c046316e" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5b91220e0cd433b139f5673c8ef670b6bcf783fbbc38fe71646113c46a0d6c86" name="bluez-obexd" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="465040eff1e596df4b59519908147cfd6f657fa0018b7d276ab25600d4f6bbdf" name="bluez-obexd" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="2a5ec6e10d290a31e0cf283ba2f49ee0ed516ec3560a260094967d3687e72be6" name="bluez-obexd" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="0c56c2566d9948bb7afcbbf4bf0390a9c77cbef886d4afaa9593b19dbd0ecea1" name="bluez-obexd" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="6a752c6fa6135cf18ba5d64b97f0430945de9cc7eb3b6cdfb350eca62d6fedbf" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5de97a8f1e9642335771f72c203ce60ccd01229b2d1fcd09394589fea1a4a7ef" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5431b1080fe1e5dad60729a742c860afbb71f0c3366307908bf572b1f43be768" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="8b72a0d0839f25aa1db0775490fcba6ac7214f8d031cfea20c12067f2a125379" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="cbcd0ef391b818fdc3eeed1e6e6c25b9e13d1e75f859c8a2dbd22c303d7909e6" name="bluez-zsh-completion" arch="noarch">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5285dde6b56c0d9cd6fd8059cd569cd0757eaec8f8e50192e0278d8329561524" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="99270795fd24748844f7352821b76706a71bdaec6a8eaa981c5b5dcc80b0fe37" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="4e01df4dc18c6307b785c62ae11922aa35b9871ed7b7046cb2c8dc5f132e03f1" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="4bbe8ee413253754857654f6438e4dd6908b2a29b745eecb81cc97ee1c97b93f" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="d821e4cadb1aeaa173adbf7896d7226764ac92963d39f3591f92340cb7fa3f9e" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="4e5a5cb614d032413ea1052f463a716a5f757c34ec42d4181202060ddd4870de" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="7a9f7df9f790a5bfe2d8c9b39b55e73bc6e4486f3d8731bd2e1bb4b9e33e4b6d" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="a9adcd3c5f0d422f281da064fcd605928a9535714d793a26890309ea67268d7f" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="05eea43210e406d1b69bbed5525b6fe415b48f7725427e1d21561a7be2e3f1aa" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="988e2363110133bcc076860e26ebd594891d2ee36373c9ebf8884ebda6bb9976" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="40ff810b4bf1be87cd150cd5903382ad5a3acfb99ab58480db28efe66d31cd7c" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="61fcecf2e65865706667459230c0b003c12a71e173f795d22483b8304d178b1b" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="7d09ece85cae82435c1fbccb868a587732678e4e9ac1cbd0a992f3aede29b6f9" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="db4cfa460f229ae549c9aadb8d54f9bc55474ffe87b52df67a6b1da1b845d44f" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="6ac465d76a2a638b8fcb59dfd54933b147eae5e720c4d97a76d3e04b4e1d04c1" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="672a5e2252924cf01e9558c451d5772150d9dc93752b21dd1feb1d386d91c228" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="de9733c894bbb09aa0d9fedbfdb4076a93eb0b884c2b8699b5967d20fb34f604" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="e9be2004c1d67eb0d980629b1446a5204938b3eb3425dfc5703d9bc765e67458" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.74" rel="150200.3.21.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1687176000">- Update to version 1.74: [bsc#1212508, CVE-2023-33201]
  * Defects Fixed:
  - AsconEngine: Fixed a buffering bug when decrypting across
    multiple processBytes calls (ascon128a unaffected).
  - Context based sanity checking on PGP signatures has been added.
  - The ParallelHash clone constructor was not copying all fields.
  - The maximimum number of blocks for CTR/SIC modes was 1 block
    less than it should have been.
  * Additional Features and Functionality:
  - The PGP API now supports wildcard key IDs for public key
    based data encryption.
  - LMS now supports SHA256/192, SHAKE256/192, and SHAKE256/256
    (the additional SP 8000-208 parameter sets).
  - The PGP API now supports V5 and V6 AEAD encryption for
    encrypted data packets.
  - The PGP examples have been updated to reflect key size and algorithm
    changes that have occurred since they were first written (10+ years...).
  - (D)TLS: A new callback 'TlsPeer.notifyConnectionClosed' will be called
    when the connection is closed (including by failure).
  - BCJSSE: Improved logging of connection events and include unique IDs
    in connection-specific log messages.
  - BCJSSE: Server now logs the offered cipher suites when it fails to
    select one.
  - BCJSSE: Added support for SSLParameters namedGroups and
    signatureSchemes properties (can also be used via BCJSSE
    extension API in earlier Java versions).
  - DTLS: The initial handshake re-send time is now configurable by
    overriding 'TlsPeer.getHandshakeResendTimeMillis'.
  - DTLS: Added support for connection IDs per RFC 9146.
  - DTLS: Performance of DTLSVerifier has been improved so that it can
    reasonably be used for all incoming packets.
  - Initial support has been added for A Mechanism for Encoding
    Differences in Paired Certificates.
  - The PGP API now supports parsing, encoding, and fingerprinting
    of V6 EC/EdEC keys.
  - A thread safe verifier API has been added to the PGP API to support
    multi-threaded verification of certifications on keys and user IDs.
  - The number of keys/sub-keys in a PGPKeyRing can now be found by
    calling PGPKeyRing.size().
  - The PQC algorithms LMS/HSS, SPHINCS+, Dilithium, Falcon, and NTRU
    are now supported directly by the BC provider.
  * Notes:
  - The now defunct PQC SIKE algorithm has been removed, this has also
    meant the removal of its resource files so the provider is now quite
    a bit smaller.
  - As a precaution, HC128 now enforces a 128 bit IV, previous behaviour
    for shorter IVs can be supported where required by padding the IV to
    the 128 bits with zero.
  - PGP encrypted data generation now uses integrity protection by default.
    Previous behaviour for encrypted data can be supported where required
    by calling PGPDataEncryptorBuilder.setWithIntegrityPacket(false) when
    data encryption is set up.
  - There are now additional sanity checks in place to prevent accidental
    mis-use of PGPSignature objects. If this change causes any issues, you
    might want to check what your code is up to as there is probably a bug.
  * Security Advisories:
  - CVE-2023-33201: this release fixes an issue with the X509LDAPCertStoreSpi
    where a specially crafted certificate subject could be used to try and
    extract extra information out of an LDAP server with wild-card matthing
    enabled.
  * Rebase bouncycastle-javadoc.patch
  * Add bouncycastle-notests.patch</changelog>
</package>
<package pkgid="9564dd456dd073ef4321deec412458007d3eee122de6a146b51a3848ccd2cb65" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="95a26cb558574bcc86b07ff62012a3f6737f8cd67d9f6efbbcc7c9933bf57950" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="4d5db059011620e64b27bd5e9863baaf6de6a1b07e95a41628862438557f086c" name="c-ares-devel" arch="ppc64le">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="33facca7d2ec4f8470ff998c1bbd34f7dfa723433ceaf873e5928e6d3b4998ce" name="c-ares-devel" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="80a3bf2fb8f5fbfe9219d828ce1defaa9b63f3135113e7932258f12102a09735" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="5c5f2455a8956815b58236cb2a572f3ca48bd0492ae5db79c3989e1bb9e71f70" name="c-ares-utils" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="e443af366f928937747520885d7a4af7db5e1a528085f3cc5510e52081537435" name="c-ares-utils" arch="ppc64le">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="9be708514ed0234ae80547704c5d5d30e888c502799d67c2ef0de848828cbf6d" name="c-ares-utils" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="5f7c2c161a560cb239f730df58d828ae4f2ff38a8ad5c7f72567c1922a5fe02d" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="fd6c2aa8e21f96ebb34752b6c98e98edb2b1e815b1dc9d9f0059bcffb7868950" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="7339381d8d067e56d16e6da3b61535c1c75c5c9b92a6e6000381acb1cb504b34" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="67960a96894ee3dd191e633696754d27ad400c141cb053f809382d38f5fb1fe0" name="cargo" arch="s390x">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="83ee9c67d985a7deac3e34e700260a90e692882dd7a419593fc6f4838c48b610" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="b3f2ff95135b348c35529afe41c825a6a7646e45bc32fcd15987d9a7f24dad7a" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.71.0" rel="150400.24.21.1"/>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
</package>
<package pkgid="a9e9e362010cfde866d231e1edb799ce86a75b93f4720f7fa96d400ad6b9b327" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.71.0" rel="150400.24.21.1"/>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
</package>
<package pkgid="5c5184506527aad9468dc61fe70926b8518cfa35005d237314ab51becc152053" name="cargo" arch="s390x">
  <version epoch="0" ver="1.71.0" rel="150400.24.21.1"/>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
</package>
<package pkgid="8d89f52ce9c5b4b2d3539b733b651bbf31e1968f76a78316540c01d24e4064c9" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.71.0" rel="150400.24.21.1"/>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
  <changelog author="william.brown@suse.com" date="1689595200">- Update to version 1.71.0 - for details see the rust1.71 package</changelog>
</package>
<package pkgid="b850b45860086181a11311c20d2be5ce9ecf59367ecb7202a71898d89f9d9ab7" name="cargo1.70" arch="aarch64">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="3caf535498f3399e6dd4a82c7bfb5e80a3c3a8b193791a9cacf823434b7251e8" name="cargo1.70" arch="ppc64le">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="1a187554b599705e6b27e4789ff2e3573401d6fb0c7310e42e0fc27057c4b43a" name="cargo1.70" arch="s390x">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="9e8ee78a8b837c96197c0f0f2c2c5545acdc33b3a16168f31a3e4b7fa08e024d" name="cargo1.70" arch="x86_64">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="3d0f3434a7545d278e8a645dd029e90c44623032b4dbc98ed3a2d758a1522c3e" name="cargo1.71" arch="aarch64">
  <version epoch="0" ver="1.71.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1689595200">Version 1.71.0 (2023-07-13)
  Language
--------
- [Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.](https://github.com/rust-lang/rust/pull/109677/)
- [Uplift `clippy::{drop,forget}_{ref,copy}` lints.](https://github.com/rust-lang/rust/pull/109732/)
- [Type inference is more conservative around constrained vars.](https://github.com/rust-lang/rust/pull/110100/)
- [Use fulfillment to check `Drop` impl compatibility](https://github.com/rust-lang/rust/pull/110577/)
  Compiler
--------
- [Evaluate place expression in `PlaceMention`](https://github.com/rust-lang/rust/pull/104844/),
  making `let _ =` patterns more consistent with respect to the borrow checker.
- [Add `--print deployment-target` flag for Apple targets.](https://github.com/rust-lang/rust/pull/105354/)
- [Stabilize `extern "C-unwind"` and friends.](https://github.com/rust-lang/rust/pull/106075/)
  The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release.
- [Update the version of musl used on `*-linux-musl` targets to 1.2.3](https://github.com/rust-lang/rust/pull/107129/),
  enabling [time64](https://musl.libc.org/time64.html) on 32-bit systems.
- [Stabilize `debugger_visualizer`](https://github.com/rust-lang/rust/pull/108668/)
  for embedding metadata like Microsoft's Natvis.
- [Enable flatten-format-args by default.](https://github.com/rust-lang/rust/pull/109999/)
- [Make `Self` respect tuple constructor privacy.](https://github.com/rust-lang/rust/pull/111245/)
- [Improve niche placement by trying two strategies and picking the better result.](https://github.com/rust-lang/rust/pull/108106/)
- [Use `apple-m1` as the target CPU for `aarch64-apple-darwin`.](https://github.com/rust-lang/rust/pull/109899/)
- [Add Tier 3 support for the `x86_64h-apple-darwin` target.](https://github.com/rust-lang/rust/pull/108795/)
- [Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/110936/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Rework handling of recursive panics.](https://github.com/rust-lang/rust/pull/110975/)
  Additional panics are allowed while unwinding, as long as they are caught before escaping
  a `Drop` implementation, but panicking within a panic hook is now an immediate abort.
- [Loosen `From&lt;&amp;[T]&gt; for Box&lt;[T]&gt;` bound to `T: Clone`.](https://github.com/rust-lang/rust/pull/103406/)
- [Remove unnecessary `T: Send` bound](https://github.com/rust-lang/rust/pull/111134/)
  in `Error for mpsc::SendError&lt;T&gt;` and `TrySendError&lt;T&gt;`.
- [Fix docs for `alloc::realloc`](https://github.com/rust-lang/rust/pull/108630/)
  to match `Layout` requirements that the size must not exceed `isize::MAX`.
- [Document `const {}` syntax for `std::thread_local`.](https://github.com/rust-lang/rust/pull/110620/)
  This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes.
  Stabilized APIs
- [`CStr::is_empty`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.is_empty)
- [`BuildHasher::hash_one`](https://doc.rust-lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one)
- [`NonZeroI*::is_positive`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive)
- [`NonZeroI*::is_negative`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative)
- [`NonZeroI*::checked_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg)
- [`NonZeroI*::overflowing_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg)
- [`NonZeroI*::saturating_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg)
- [`NonZeroI*::wrapping_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg)
- [`Neg for NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32)
- [`Neg for &amp;NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32)
- [`From&lt;[T; N]&gt; for (T...)`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,))
  (array to N-tuple for N in 1..=12)
- [`From&lt;(T...)&gt; for [T; N]`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D)
  (N-tuple to array for N in 1..=12)
- [`windows::io::AsHandle for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Box%3CT%3E)
- [`windows::io::AsHandle for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Rc%3CT%3E)
- [`windows::io::AsHandle for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Arc%3CT%3E)
- [`windows::io::AsSocket for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Box%3CT%3E)
- [`windows::io::AsSocket for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Rc%3CT%3E)
- [`windows::io::AsSocket for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Arc%3CT%3E)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read)
- [`&lt;*const T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned)
- [`&lt;*mut T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read-1)
- [`&lt;*mut T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1)
- [`ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html)
- [`ptr::read_unaligned`](https://doc.rust-lang.org/stable/std/ptr/fn.read_unaligned.html)
- [`&lt;[T]&gt;::split_at`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_at)
  Cargo
-----
- [Allow named debuginfo options in `Cargo.toml`.](https://github.com/rust-lang/cargo/pull/11958/)
- [Add `workspace_default_members` to the output of `cargo metadata`.](https://github.com/rust-lang/cargo/pull/11978/)
- [`cargo add` now considers `rust-version` when selecting packages.](https://github.com/rust-lang/cargo/pull/12078/)
- [Automatically inherit workspace fields when running `cargo new`/`cargo init`.](https://github.com/rust-lang/cargo/pull/12069/)
  Rustdoc
-------
- [Add a new `rustdoc::unescaped_backticks` lint for broken inline code.](https://github.com/rust-lang/rust/pull/105848/)
- [Support strikethrough with single tildes.](https://github.com/rust-lang/rust/pull/111152/) (`~~old~~` vs. `~new~`)
  Misc
----
  Compatibility Notes
- [Remove structural match from `TypeId`.](https://github.com/rust-lang/rust/pull/103291/)
  Code that uses a constant `TypeId` in a pattern will potentially be broken.
  Known cases have already been fixed -- in particular, users of the `log`
  crate's `kv_unstable` feature should update to `log v0.4.18` or later.
- [Add a `sysroot` crate to represent the standard library crates.](https://github.com/rust-lang/rust/pull/108865/)
  This does not affect stable users, but may require adjustment in tools that build their own standard library.
- [Cargo optimizes its usage under `rustup`.](https://github.com/rust-lang/cargo/pull/11917/) When
  Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and
  use the underlying binary directly. There are assumptions around the interaction with rustup and
  `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users.
- [When querying a package, Cargo tries only the original name, all hyphens, and all underscores to
  handle misspellings.](https://github.com/rust-lang/cargo/pull/12083/) Previously, Cargo tried each
  combination of hyphens and underscores, causing excessive requests to crates.io.
- Cargo now [disallows `RUSTUP_HOME`](https://github.com/rust-lang/cargo/pull/12101/) and
  [`RUSTUP_TOOLCHAIN`](https://github.com/rust-lang/cargo/pull/12107/) in the `[env]` configuration
  table. This is considered to be not a use case Cargo would like to support, since it will likely
  cause problems or lead to confusion.</changelog>
</package>
<package pkgid="c90f887a40b469f03b186b3491a3077e1f1d0c51358d4d36c439d961fdbc3d34" name="cargo1.71" arch="ppc64le">
  <version epoch="0" ver="1.71.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1689595200">Version 1.71.0 (2023-07-13)
  Language
--------
- [Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.](https://github.com/rust-lang/rust/pull/109677/)
- [Uplift `clippy::{drop,forget}_{ref,copy}` lints.](https://github.com/rust-lang/rust/pull/109732/)
- [Type inference is more conservative around constrained vars.](https://github.com/rust-lang/rust/pull/110100/)
- [Use fulfillment to check `Drop` impl compatibility](https://github.com/rust-lang/rust/pull/110577/)
  Compiler
--------
- [Evaluate place expression in `PlaceMention`](https://github.com/rust-lang/rust/pull/104844/),
  making `let _ =` patterns more consistent with respect to the borrow checker.
- [Add `--print deployment-target` flag for Apple targets.](https://github.com/rust-lang/rust/pull/105354/)
- [Stabilize `extern "C-unwind"` and friends.](https://github.com/rust-lang/rust/pull/106075/)
  The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release.
- [Update the version of musl used on `*-linux-musl` targets to 1.2.3](https://github.com/rust-lang/rust/pull/107129/),
  enabling [time64](https://musl.libc.org/time64.html) on 32-bit systems.
- [Stabilize `debugger_visualizer`](https://github.com/rust-lang/rust/pull/108668/)
  for embedding metadata like Microsoft's Natvis.
- [Enable flatten-format-args by default.](https://github.com/rust-lang/rust/pull/109999/)
- [Make `Self` respect tuple constructor privacy.](https://github.com/rust-lang/rust/pull/111245/)
- [Improve niche placement by trying two strategies and picking the better result.](https://github.com/rust-lang/rust/pull/108106/)
- [Use `apple-m1` as the target CPU for `aarch64-apple-darwin`.](https://github.com/rust-lang/rust/pull/109899/)
- [Add Tier 3 support for the `x86_64h-apple-darwin` target.](https://github.com/rust-lang/rust/pull/108795/)
- [Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/110936/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Rework handling of recursive panics.](https://github.com/rust-lang/rust/pull/110975/)
  Additional panics are allowed while unwinding, as long as they are caught before escaping
  a `Drop` implementation, but panicking within a panic hook is now an immediate abort.
- [Loosen `From&lt;&amp;[T]&gt; for Box&lt;[T]&gt;` bound to `T: Clone`.](https://github.com/rust-lang/rust/pull/103406/)
- [Remove unnecessary `T: Send` bound](https://github.com/rust-lang/rust/pull/111134/)
  in `Error for mpsc::SendError&lt;T&gt;` and `TrySendError&lt;T&gt;`.
- [Fix docs for `alloc::realloc`](https://github.com/rust-lang/rust/pull/108630/)
  to match `Layout` requirements that the size must not exceed `isize::MAX`.
- [Document `const {}` syntax for `std::thread_local`.](https://github.com/rust-lang/rust/pull/110620/)
  This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes.
  Stabilized APIs
- [`CStr::is_empty`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.is_empty)
- [`BuildHasher::hash_one`](https://doc.rust-lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one)
- [`NonZeroI*::is_positive`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive)
- [`NonZeroI*::is_negative`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative)
- [`NonZeroI*::checked_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg)
- [`NonZeroI*::overflowing_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg)
- [`NonZeroI*::saturating_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg)
- [`NonZeroI*::wrapping_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg)
- [`Neg for NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32)
- [`Neg for &amp;NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32)
- [`From&lt;[T; N]&gt; for (T...)`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,))
  (array to N-tuple for N in 1..=12)
- [`From&lt;(T...)&gt; for [T; N]`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D)
  (N-tuple to array for N in 1..=12)
- [`windows::io::AsHandle for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Box%3CT%3E)
- [`windows::io::AsHandle for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Rc%3CT%3E)
- [`windows::io::AsHandle for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Arc%3CT%3E)
- [`windows::io::AsSocket for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Box%3CT%3E)
- [`windows::io::AsSocket for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Rc%3CT%3E)
- [`windows::io::AsSocket for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Arc%3CT%3E)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read)
- [`&lt;*const T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned)
- [`&lt;*mut T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read-1)
- [`&lt;*mut T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1)
- [`ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html)
- [`ptr::read_unaligned`](https://doc.rust-lang.org/stable/std/ptr/fn.read_unaligned.html)
- [`&lt;[T]&gt;::split_at`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_at)
  Cargo
-----
- [Allow named debuginfo options in `Cargo.toml`.](https://github.com/rust-lang/cargo/pull/11958/)
- [Add `workspace_default_members` to the output of `cargo metadata`.](https://github.com/rust-lang/cargo/pull/11978/)
- [`cargo add` now considers `rust-version` when selecting packages.](https://github.com/rust-lang/cargo/pull/12078/)
- [Automatically inherit workspace fields when running `cargo new`/`cargo init`.](https://github.com/rust-lang/cargo/pull/12069/)
  Rustdoc
-------
- [Add a new `rustdoc::unescaped_backticks` lint for broken inline code.](https://github.com/rust-lang/rust/pull/105848/)
- [Support strikethrough with single tildes.](https://github.com/rust-lang/rust/pull/111152/) (`~~old~~` vs. `~new~`)
  Misc
----
  Compatibility Notes
- [Remove structural match from `TypeId`.](https://github.com/rust-lang/rust/pull/103291/)
  Code that uses a constant `TypeId` in a pattern will potentially be broken.
  Known cases have already been fixed -- in particular, users of the `log`
  crate's `kv_unstable` feature should update to `log v0.4.18` or later.
- [Add a `sysroot` crate to represent the standard library crates.](https://github.com/rust-lang/rust/pull/108865/)
  This does not affect stable users, but may require adjustment in tools that build their own standard library.
- [Cargo optimizes its usage under `rustup`.](https://github.com/rust-lang/cargo/pull/11917/) When
  Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and
  use the underlying binary directly. There are assumptions around the interaction with rustup and
  `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users.
- [When querying a package, Cargo tries only the original name, all hyphens, and all underscores to
  handle misspellings.](https://github.com/rust-lang/cargo/pull/12083/) Previously, Cargo tried each
  combination of hyphens and underscores, causing excessive requests to crates.io.
- Cargo now [disallows `RUSTUP_HOME`](https://github.com/rust-lang/cargo/pull/12101/) and
  [`RUSTUP_TOOLCHAIN`](https://github.com/rust-lang/cargo/pull/12107/) in the `[env]` configuration
  table. This is considered to be not a use case Cargo would like to support, since it will likely
  cause problems or lead to confusion.</changelog>
</package>
<package pkgid="cc63ed7c67f849467b3029ce67a74324cf1c579d1669b2f1965eeae483b9649b" name="cargo1.71" arch="s390x">
  <version epoch="0" ver="1.71.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1689595200">Version 1.71.0 (2023-07-13)
  Language
--------
- [Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.](https://github.com/rust-lang/rust/pull/109677/)
- [Uplift `clippy::{drop,forget}_{ref,copy}` lints.](https://github.com/rust-lang/rust/pull/109732/)
- [Type inference is more conservative around constrained vars.](https://github.com/rust-lang/rust/pull/110100/)
- [Use fulfillment to check `Drop` impl compatibility](https://github.com/rust-lang/rust/pull/110577/)
  Compiler
--------
- [Evaluate place expression in `PlaceMention`](https://github.com/rust-lang/rust/pull/104844/),
  making `let _ =` patterns more consistent with respect to the borrow checker.
- [Add `--print deployment-target` flag for Apple targets.](https://github.com/rust-lang/rust/pull/105354/)
- [Stabilize `extern "C-unwind"` and friends.](https://github.com/rust-lang/rust/pull/106075/)
  The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release.
- [Update the version of musl used on `*-linux-musl` targets to 1.2.3](https://github.com/rust-lang/rust/pull/107129/),
  enabling [time64](https://musl.libc.org/time64.html) on 32-bit systems.
- [Stabilize `debugger_visualizer`](https://github.com/rust-lang/rust/pull/108668/)
  for embedding metadata like Microsoft's Natvis.
- [Enable flatten-format-args by default.](https://github.com/rust-lang/rust/pull/109999/)
- [Make `Self` respect tuple constructor privacy.](https://github.com/rust-lang/rust/pull/111245/)
- [Improve niche placement by trying two strategies and picking the better result.](https://github.com/rust-lang/rust/pull/108106/)
- [Use `apple-m1` as the target CPU for `aarch64-apple-darwin`.](https://github.com/rust-lang/rust/pull/109899/)
- [Add Tier 3 support for the `x86_64h-apple-darwin` target.](https://github.com/rust-lang/rust/pull/108795/)
- [Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/110936/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Rework handling of recursive panics.](https://github.com/rust-lang/rust/pull/110975/)
  Additional panics are allowed while unwinding, as long as they are caught before escaping
  a `Drop` implementation, but panicking within a panic hook is now an immediate abort.
- [Loosen `From&lt;&amp;[T]&gt; for Box&lt;[T]&gt;` bound to `T: Clone`.](https://github.com/rust-lang/rust/pull/103406/)
- [Remove unnecessary `T: Send` bound](https://github.com/rust-lang/rust/pull/111134/)
  in `Error for mpsc::SendError&lt;T&gt;` and `TrySendError&lt;T&gt;`.
- [Fix docs for `alloc::realloc`](https://github.com/rust-lang/rust/pull/108630/)
  to match `Layout` requirements that the size must not exceed `isize::MAX`.
- [Document `const {}` syntax for `std::thread_local`.](https://github.com/rust-lang/rust/pull/110620/)
  This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes.
  Stabilized APIs
- [`CStr::is_empty`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.is_empty)
- [`BuildHasher::hash_one`](https://doc.rust-lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one)
- [`NonZeroI*::is_positive`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive)
- [`NonZeroI*::is_negative`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative)
- [`NonZeroI*::checked_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg)
- [`NonZeroI*::overflowing_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg)
- [`NonZeroI*::saturating_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg)
- [`NonZeroI*::wrapping_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg)
- [`Neg for NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32)
- [`Neg for &amp;NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32)
- [`From&lt;[T; N]&gt; for (T...)`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,))
  (array to N-tuple for N in 1..=12)
- [`From&lt;(T...)&gt; for [T; N]`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D)
  (N-tuple to array for N in 1..=12)
- [`windows::io::AsHandle for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Box%3CT%3E)
- [`windows::io::AsHandle for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Rc%3CT%3E)
- [`windows::io::AsHandle for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Arc%3CT%3E)
- [`windows::io::AsSocket for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Box%3CT%3E)
- [`windows::io::AsSocket for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Rc%3CT%3E)
- [`windows::io::AsSocket for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Arc%3CT%3E)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read)
- [`&lt;*const T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned)
- [`&lt;*mut T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read-1)
- [`&lt;*mut T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1)
- [`ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html)
- [`ptr::read_unaligned`](https://doc.rust-lang.org/stable/std/ptr/fn.read_unaligned.html)
- [`&lt;[T]&gt;::split_at`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_at)
  Cargo
-----
- [Allow named debuginfo options in `Cargo.toml`.](https://github.com/rust-lang/cargo/pull/11958/)
- [Add `workspace_default_members` to the output of `cargo metadata`.](https://github.com/rust-lang/cargo/pull/11978/)
- [`cargo add` now considers `rust-version` when selecting packages.](https://github.com/rust-lang/cargo/pull/12078/)
- [Automatically inherit workspace fields when running `cargo new`/`cargo init`.](https://github.com/rust-lang/cargo/pull/12069/)
  Rustdoc
-------
- [Add a new `rustdoc::unescaped_backticks` lint for broken inline code.](https://github.com/rust-lang/rust/pull/105848/)
- [Support strikethrough with single tildes.](https://github.com/rust-lang/rust/pull/111152/) (`~~old~~` vs. `~new~`)
  Misc
----
  Compatibility Notes
- [Remove structural match from `TypeId`.](https://github.com/rust-lang/rust/pull/103291/)
  Code that uses a constant `TypeId` in a pattern will potentially be broken.
  Known cases have already been fixed -- in particular, users of the `log`
  crate's `kv_unstable` feature should update to `log v0.4.18` or later.
- [Add a `sysroot` crate to represent the standard library crates.](https://github.com/rust-lang/rust/pull/108865/)
  This does not affect stable users, but may require adjustment in tools that build their own standard library.
- [Cargo optimizes its usage under `rustup`.](https://github.com/rust-lang/cargo/pull/11917/) When
  Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and
  use the underlying binary directly. There are assumptions around the interaction with rustup and
  `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users.
- [When querying a package, Cargo tries only the original name, all hyphens, and all underscores to
  handle misspellings.](https://github.com/rust-lang/cargo/pull/12083/) Previously, Cargo tried each
  combination of hyphens and underscores, causing excessive requests to crates.io.
- Cargo now [disallows `RUSTUP_HOME`](https://github.com/rust-lang/cargo/pull/12101/) and
  [`RUSTUP_TOOLCHAIN`](https://github.com/rust-lang/cargo/pull/12107/) in the `[env]` configuration
  table. This is considered to be not a use case Cargo would like to support, since it will likely
  cause problems or lead to confusion.</changelog>
</package>
<package pkgid="98f3d2e5ef0e9193844b1dc050b10941bb6fef6e56ac733214e7eb0f32425d22" name="cargo1.71" arch="x86_64">
  <version epoch="0" ver="1.71.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1689595200">Version 1.71.0 (2023-07-13)
  Language
--------
- [Stabilize `raw-dylib`, `link_ordinal`, `import_name_type` and `-Cdlltool`.](https://github.com/rust-lang/rust/pull/109677/)
- [Uplift `clippy::{drop,forget}_{ref,copy}` lints.](https://github.com/rust-lang/rust/pull/109732/)
- [Type inference is more conservative around constrained vars.](https://github.com/rust-lang/rust/pull/110100/)
- [Use fulfillment to check `Drop` impl compatibility](https://github.com/rust-lang/rust/pull/110577/)
  Compiler
--------
- [Evaluate place expression in `PlaceMention`](https://github.com/rust-lang/rust/pull/104844/),
  making `let _ =` patterns more consistent with respect to the borrow checker.
- [Add `--print deployment-target` flag for Apple targets.](https://github.com/rust-lang/rust/pull/105354/)
- [Stabilize `extern "C-unwind"` and friends.](https://github.com/rust-lang/rust/pull/106075/)
  The existing `extern "C"` etc. may change behavior for cross-language unwinding in a future release.
- [Update the version of musl used on `*-linux-musl` targets to 1.2.3](https://github.com/rust-lang/rust/pull/107129/),
  enabling [time64](https://musl.libc.org/time64.html) on 32-bit systems.
- [Stabilize `debugger_visualizer`](https://github.com/rust-lang/rust/pull/108668/)
  for embedding metadata like Microsoft's Natvis.
- [Enable flatten-format-args by default.](https://github.com/rust-lang/rust/pull/109999/)
- [Make `Self` respect tuple constructor privacy.](https://github.com/rust-lang/rust/pull/111245/)
- [Improve niche placement by trying two strategies and picking the better result.](https://github.com/rust-lang/rust/pull/108106/)
- [Use `apple-m1` as the target CPU for `aarch64-apple-darwin`.](https://github.com/rust-lang/rust/pull/109899/)
- [Add Tier 3 support for the `x86_64h-apple-darwin` target.](https://github.com/rust-lang/rust/pull/108795/)
- [Promote `loongarch64-unknown-linux-gnu` to Tier 2 with host tools.](https://github.com/rust-lang/rust/pull/110936/)
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Rework handling of recursive panics.](https://github.com/rust-lang/rust/pull/110975/)
  Additional panics are allowed while unwinding, as long as they are caught before escaping
  a `Drop` implementation, but panicking within a panic hook is now an immediate abort.
- [Loosen `From&lt;&amp;[T]&gt; for Box&lt;[T]&gt;` bound to `T: Clone`.](https://github.com/rust-lang/rust/pull/103406/)
- [Remove unnecessary `T: Send` bound](https://github.com/rust-lang/rust/pull/111134/)
  in `Error for mpsc::SendError&lt;T&gt;` and `TrySendError&lt;T&gt;`.
- [Fix docs for `alloc::realloc`](https://github.com/rust-lang/rust/pull/108630/)
  to match `Layout` requirements that the size must not exceed `isize::MAX`.
- [Document `const {}` syntax for `std::thread_local`.](https://github.com/rust-lang/rust/pull/110620/)
  This syntax was stabilized in Rust 1.59, but not previously mentioned in release notes.
  Stabilized APIs
- [`CStr::is_empty`](https://doc.rust-lang.org/stable/std/ffi/struct.CStr.html#method.is_empty)
- [`BuildHasher::hash_one`](https://doc.rust-lang.org/stable/std/hash/trait.BuildHasher.html#method.hash_one)
- [`NonZeroI*::is_positive`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_positive)
- [`NonZeroI*::is_negative`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.is_negative)
- [`NonZeroI*::checked_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.checked_neg)
- [`NonZeroI*::overflowing_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.overflowing_neg)
- [`NonZeroI*::saturating_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.saturating_neg)
- [`NonZeroI*::wrapping_neg`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#method.wrapping_neg)
- [`Neg for NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-NonZeroI32)
- [`Neg for &amp;NonZeroI*`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI32.html#impl-Neg-for-%26NonZeroI32)
- [`From&lt;[T; N]&gt; for (T...)`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C%5BT;+1%5D%3E-for-(T,))
  (array to N-tuple for N in 1..=12)
- [`From&lt;(T...)&gt; for [T; N]`](https://doc.rust-lang.org/stable/std/primitive.array.html#impl-From%3C(T,)%3E-for-%5BT;+1%5D)
  (N-tuple to array for N in 1..=12)
- [`windows::io::AsHandle for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Box%3CT%3E)
- [`windows::io::AsHandle for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Rc%3CT%3E)
- [`windows::io::AsHandle for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsHandle.html#impl-AsHandle-for-Arc%3CT%3E)
- [`windows::io::AsSocket for Box&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Box%3CT%3E)
- [`windows::io::AsSocket for Rc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Rc%3CT%3E)
- [`windows::io::AsSocket for Arc&lt;T&gt;`](https://doc.rust-lang.org/stable/std/os/windows/io/trait.AsSocket.html#impl-AsSocket-for-Arc%3CT%3E)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read)
- [`&lt;*const T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned)
- [`&lt;*mut T&gt;::read`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read-1)
- [`&lt;*mut T&gt;::read_unaligned`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.read_unaligned-1)
- [`ptr::read`](https://doc.rust-lang.org/stable/std/ptr/fn.read.html)
- [`ptr::read_unaligned`](https://doc.rust-lang.org/stable/std/ptr/fn.read_unaligned.html)
- [`&lt;[T]&gt;::split_at`](https://doc.rust-lang.org/stable/std/primitive.slice.html#method.split_at)
  Cargo
-----
- [Allow named debuginfo options in `Cargo.toml`.](https://github.com/rust-lang/cargo/pull/11958/)
- [Add `workspace_default_members` to the output of `cargo metadata`.](https://github.com/rust-lang/cargo/pull/11978/)
- [`cargo add` now considers `rust-version` when selecting packages.](https://github.com/rust-lang/cargo/pull/12078/)
- [Automatically inherit workspace fields when running `cargo new`/`cargo init`.](https://github.com/rust-lang/cargo/pull/12069/)
  Rustdoc
-------
- [Add a new `rustdoc::unescaped_backticks` lint for broken inline code.](https://github.com/rust-lang/rust/pull/105848/)
- [Support strikethrough with single tildes.](https://github.com/rust-lang/rust/pull/111152/) (`~~old~~` vs. `~new~`)
  Misc
----
  Compatibility Notes
- [Remove structural match from `TypeId`.](https://github.com/rust-lang/rust/pull/103291/)
  Code that uses a constant `TypeId` in a pattern will potentially be broken.
  Known cases have already been fixed -- in particular, users of the `log`
  crate's `kv_unstable` feature should update to `log v0.4.18` or later.
- [Add a `sysroot` crate to represent the standard library crates.](https://github.com/rust-lang/rust/pull/108865/)
  This does not affect stable users, but may require adjustment in tools that build their own standard library.
- [Cargo optimizes its usage under `rustup`.](https://github.com/rust-lang/cargo/pull/11917/) When
  Cargo detects it will run `rustc` pointing to a rustup proxy, it'll try bypassing the proxy and
  use the underlying binary directly. There are assumptions around the interaction with rustup and
  `RUSTUP_TOOLCHAIN`. However, it's not expected to affect normal users.
- [When querying a package, Cargo tries only the original name, all hyphens, and all underscores to
  handle misspellings.](https://github.com/rust-lang/cargo/pull/12083/) Previously, Cargo tried each
  combination of hyphens and underscores, causing excessive requests to crates.io.
- Cargo now [disallows `RUSTUP_HOME`](https://github.com/rust-lang/cargo/pull/12101/) and
  [`RUSTUP_TOOLCHAIN`](https://github.com/rust-lang/cargo/pull/12107/) in the `[env]` configuration
  table. This is considered to be not a use case Cargo would like to support, since it will likely
  cause problems or lead to confusion.</changelog>
</package>
<package pkgid="398b69741fa11385700c0a2c15062a809bd98ed54c6ae553366a854b81715afd" name="clingo" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="c36153a3ccaf654e6169bd00ad62454ee83c6b1d9fe0f7744b18759608d2699a" name="clingo" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="0ed2b7d64503bf1adf2edd05a54977ae6ef1d89b5bc78eb39e869adbd3d6370f" name="clingo" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="f56b9e6aae3392b1bc267342388169c318eb9356b0ba8a06bfa24a3f4971f895" name="clingo" arch="src">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="844ffa128a88ebf830ad24cdbe9a305bafbfddc5262d25934534b9b6caab84b9" name="clingo" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="bb317e3c6c20717dbd4fdc4468d30b1c445cb1cecccb9a10920d5532e8dda8b5" name="clingo-devel" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="8b02ffd6aa9040b9a888e56f41079435e45d63c52e4cebc06acddd9918920e19" name="clingo-devel" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="762cb2354d82f5b1284d3a032c9be20a5bfd16806ab9211be33c6e807c2d4f3f" name="clingo-devel" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="bd28acd4874f2b99498dd54cab30af45d12c54b39acace0e4a6218df19fcd905" name="clingo-devel" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="3f911f119b354e0ad0911ad7da1bd155bea5d8f10cf12dd0a854d4d5934b302d" name="cloud-init" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="c2787c82455d0f92b54b1b86ca39afb318ef2b7aff3ccbd093f4cdb71aadb0a2" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="b618634652b156a122cc645675af1ac06ec3aa8e369c349c9abad71428f9604b" name="cloud-init" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="9b53bef8b442b2ab8dd4f1183e8cc9ccd03a78acf0d4be4a01000ac91a9a3035" name="cloud-init" arch="src">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="0c434f47f4944c21792d47c4b852f210ead862db9a90dc37362f2a65effd31f5" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="f72c35bce766d4255a406dca70342a685fefe763186a29241db8bee26febbcc0" name="cloud-init-config-suse" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="4a28238ce089675e471a252b669b206f2e23de27b2ca78c118d3da32c4ce27f3" name="cloud-init-config-suse" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="6001c63fac48ca52aa5f6f3753abbcfb8c3001899b5ee399bd6adede861f8136" name="cloud-init-config-suse" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="957da3685b28118b198ab8276fbfa83a511c5207b4d4b4dc94c8029b10770256" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="7551f9684cae92de2480488cb13354b69b5ba336d79d51007710e1785a41d0e5" name="cloud-init-doc" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="3753815df3ed04f6ee0070653e43d805a31aee2811f89ad037c8de8451dc42dc" name="cloud-init-doc" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="c1570f35ec44e6f375891ce69aa29ef5907a5281959f1ff786a0309b3bfe89ad" name="cloud-init-doc" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="bc2630a948cb7bdbede0c4d4530ae6e01ba61875339476e6e14c3a3cd9e2298c" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="984927b5f030d811b67885129b33e78e7d58f29225db6b923e4685ab602af51a" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="61d0d62dc88f5f7d1cadfd302f44c3aa534d6e7e13cd9cf6665bca022b54a15f" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="307e869c11bc5d226b5a5eb1337cf0e1347b9e1aa34cb9d5e32d0b9178360fdd" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="7cd8fb20bedba322f632e252669fc5d5bf70a2e29fd48bff583004db49558c9b" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="0d5534f9ba4478a3718f89f6233ee0cc669229d305d955cd26134f3237dc3f67" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="a9f4d4b710f05041590db4f366d2822de926be9e1be49f867dc427a6f7ece86b" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="d19df3a90be803bf4969a12a7143525c55d042f406a970e50978bb0d66fd5a1c" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="cb011285a2e2dcf212f5fab907c777f2ab2b7946964c52ea760a3842b636f6b8" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="bbe6ae9b6627e673b094fbba286f3155efe8fa8c86dfdef828bedb849f77fe6f" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="273b51658c25e49b1bd33a9f73ad1463756bf914d80776f9f53b740ee752b278" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="4506f55ddea308c12b2f6cc5575709f6eaaa451bfce9d8acb2d0af360016972d" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="348460e4a444c476aa35e7c67c1e9b7a4d68323be510a532e56c6b8a81a88f7e" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="df7d138e845f032c4ffb8255a75d8974bf12bb6e9fdb0b0d7610fc8134574504" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="ac5f6841396b89320b2a71ab7a69d1e2626535029f956f68ede3d8a54da9c949" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="15dfc764db1ecd874f488790c1c53d76a3ff5d96c9eed057f1f42bcc333aed9e" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="4a007cabe0ddc43fcefe505b6e6ef0b14cde4c496f5c4a2a5954a9bcb67d7886" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="b4cb148f8b5431aaab9cf77845711ca0cfe392b8e2f876f218171a34f50d3e59" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.5.1"/>
  <changelog author="tbogendoerfer@suse.de" date="1687435200">- net/mlx5: fix missing mutex_unlock in
  mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- commit f9de2c8</changelog>
  <changelog author="mkoutny@suse.com" date="1687435201">- Refresh patches.suse/x86-mm-use-mm_alloc-in-poking_init.patch.
  To fix build that missed mm_alloc definition.
- commit dcd5af4</changelog>
  <changelog author="jlee@suse.com" date="1687521600">- Update References tag patches.suse/drm-msm-dpu-Add-check-for-pstates.patch
  (git-fixes 1212556 CVE-2023-3220).
- commit 7faa4b1</changelog>
  <changelog author="jlee@suse.com" date="1687521601">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1aef403</changelog>
  <changelog author="jlee@suse.com" date="1687521602">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1058d70</changelog>
  <changelog author="tiwai@suse.de" date="1687521603">- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from
  irq context (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- commit a8d1547</changelog>
  <changelog author="msuchanek@suse.de" date="1687780800">- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled
  (bsc#1194869).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
  (bsc#1194869 bsc#1212701).
- commit 98497f8</changelog>
  <changelog author="tiwai@suse.de" date="1687780801">- i2c: imx-lpi2c: fix type char overflow issue when calculating
  the clock cycle (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13"
  SSID in the ALC256 (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
  (git-fixes).
- commit 607c980</changelog>
  <changelog author="msuchanek@suse.de" date="1687780802">- powerpc/set_memory: Avoid spinlock recursion in
  change_page_attr() (bsc#1194869).
- commit c747d4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780803">- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- commit 958e41f</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780804">- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- commit d73721e</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780805">- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- commit e8ab3ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780806">- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- commit 26e74c2</changelog>
  <changelog author="vkarasulli@suse.de" date="1687780807">- Update references in the patch
  patches.suse/HID-intel_ish-hid-Add-check-for-ishtp_dma_tx_map.patch
  (git-fixes bsc#1212606 CVE-2023-3358).
- commit f3ebbc7</changelog>
  <changelog author="msuchanek@suse.de" date="1687780808">- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- commit 95a40a6</changelog>
  <changelog author="krisman@suse.de" date="1687780809">- io_uring: fix size calculation when registering buf ring
  (git-fixes).
- commit 4eadbe9</changelog>
  <changelog author="tiwai@suse.de" date="1687867200">- thermal/drivers/sun8i: Fix some error handling paths in
  sun8i_ths_probe() (git-fixes).
- PM: domains: fix integer overflow issues in genpd_parse_state()
  (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in
  ttc_timer_probe (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
  (git-fixes).
- irqchip/clps711x: Remove unused clps711x_intc_init() function
  (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- commit bc06af3</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1687867201">- ice: Fix XDP memory leak when NIC is brought up and down
  (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: fix invalid check for empty list in
  ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom()
  (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe()
  (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active
  (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not
  sufficient (git-fixes).
- ice: Don't double unplug aux on peer initiated reset
  (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context
  (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB
  (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice, xsk: Diversify return values from xsk_wakeup call paths
  (git-fixes).
- commit 6a47979</changelog>
  <changelog author="tzimmermann@suse.com" date="1687867202">- Remove patches.suse/0523-of-Create-platform-devices-for-OF-framebuffers.patch (bsc#1212405)
- commit 6d207a1</changelog>
  <changelog author="mgorman@suse.de" date="1688040000">- Refresh -rt config files.
- commit 4ed99b1</changelog>
</package>
<package pkgid="529a6a411d44e40491dc6659ca6bb9654ef27073d2cb03966b60db537931fe3a" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="150500.9.3.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="b085d03f13825999caf9d6a1e23fded2305a8aeb6bd3e7fe8eeffe91c50afee9" name="conmon" arch="ppc64le">
  <version epoch="0" ver="2.1.7" rel="150500.9.3.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="2b08c70389c9bb8a6e7acb2028b1ffb43fc3f97f0e98ea9cf5ae6f2e1ad0db78" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="150500.9.3.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="887f20c27bf5b2e24cffc5e60dea283b74b8cc3af770778c6da2ea3d10a5a33b" name="conmon" arch="src">
  <version epoch="0" ver="2.1.7" rel="150500.9.3.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="ec6e52a54434760de4bf41d399fa2d35cf2bfce720bcc5ef80aeb6068cb7006c" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="150500.9.3.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="35452e92397a66e960a20753fa4d159fc53ee649a65e76254134d08cf1964a96" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b72bc37145c7ffd7e67fcb3a51b943d21d2d0aa93bea75648d666d5c5b8544c1" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="6e2b23cc362cfcec84792bb3bf2a90cdf5104d5f267d5eb8dc724146278249cf" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="a9502efb0fb280c7a99422748f26ce7386399f19646e094e67e2c0c010efceec" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ba167df73b6f5f67237d27f7d90e55a3e869077953aa9537b2fb56756e433e5e" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="5d3b9b0ddf69fcffbf38e47d37f4c7bb483260bad42a00c4e06ba57ebcee5312" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="9da9e8464980c4f8564f6dbb855781838570f1b5952f6610b04fd6286413cf26" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="434f16e2c9ef82aec6c6147979d0eea0f3ae116b85e6ce39900c356c5c75ef54" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="53bbcb313c59d7d378637d025b274fa2e804ecb7ac009a25db45500fd5a2945b" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="2418558b402debdb54ff62383e7decb4fb6e22d94bf86a652062df54ed388673" name="containerd-devel" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="48fd1dd7d0101e83f5551a8cf0693248e98c1dee8a1cffa00a5d54fccc1f42bf" name="containerd-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="f868c824e77e6979011c638ff03c2450e86b1a8d296b3e2ad4115497abf08abf" name="containerd-devel" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ea32406899ba1f93599af3ad28124d088e6b5b71ea5b96ba23879a23170f8848" name="containerd-devel" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ce65fee07f79c3f1fb1aaaf3bef109b9f94a1908c1ce1a16b86f9c576da99a69" name="corepack18" arch="aarch64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="9ebc56d6e7cede8e8e44777bf6d6af9a01b8697cc490e68401c25c615b0daffb" name="corepack18" arch="s390x">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="c27955c9f70c6fc9dd72b35eb31d4ce09aa01f2b8f5878faaf6a5c497f6a2a1b" name="corepack18" arch="x86_64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="1b4be633fffc1aabef5f439370e5447ca9435edc0d510c32150fbb9ae60a0aee" name="corepack18" arch="aarch64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="bf6f13e9aaf79ebaeaa734b9b6c43e335e73e068d63e642e728a9ef481f91bec" name="corepack18" arch="ppc64le">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="993ae85363b277e0004078954949d1b038b02c8f51c80f85ece43c7c84dda806" name="corepack18" arch="s390x">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="862379498dbc384f07b750be287371f72f418c02457aae7154305167035f6efb" name="corepack18" arch="x86_64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="a0d209518e3caa3e23f60c41ff52d88b8dadd382d5f8fd8d9382e02ebd64958f" name="cosign" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="9603c137627b635cca4136e00e8595645404202091d8fe664ff311bcedaa21b5" name="cosign" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="85f5b69fd602701c92d4955f157827e9d77df122e10faa50806ce0fa0abec27a" name="cosign" arch="s390x">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="40772f2aedb723f898b22c66686cfaa204ada721f762346575dbb09638413537" name="cosign" arch="src">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="2b17896075d252e2d3af9519b8ba091c88d09c777eae2e7231d5695bb0396d59" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="a3736b4ec4143e32868bcc02a60ce27fbacc6fd89500341cba8f14aeb6fe383a" name="cosign" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="eb25d63eb0f68bad7b16fa63a32772f19effdb11b8eb852f83d0479df3c34d2f" name="cosign" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="2ca27a6f9b93072d76d2cfc607e6c24104be30b587662884ffac4102134ad9cf" name="cosign" arch="s390x">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="cbe00f0f9d682ec2e9a17aad3b0bed0092538d075a9a940bde67620c461548d7" name="cosign" arch="src">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="a58f5fe9308e4aeeb714f39cf66be687c47d64578528bea54117897632b659d1" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="c60d6476740c6482c27fde08b65fd765124251320de9a1c95d16f55260b5e74a" name="cpp12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="94478ea9c0e79550d707a49080daa9fbd5f0db1cc4d7eec5a5760050729ecaa2" name="cpp12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1057891f8b58236191ede070b0ad82b8641463919ff15dc25961587af8c50ad6" name="cpp12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fb232300907277085c475d5c83f99470fe3df198a87d9a0f5c59fe2fc114a7bb" name="cpp12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2e88743289e1a80a88585012f641ac765cce2f5166f148f8619ee62d9116576d" name="cpupower" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="3a0e15ddccf7c0581831f155ea7d36cfea064d37392c403d348a2e9a8f43147b" name="cpupower" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="336948dbfeec34829b85e75ed1ea4f57c3edb05e7665aeeed7a17ff12deeea5a" name="cpupower" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="9d4b50362d8f506974571a254d673898850a49cecab965e8f77f53e3ae7a6217" name="cpupower" arch="src">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="86a9e9aba4bcc45b74f383d1c7d45562dd8c86a8f5b47c3ed4b8c5c78a29060d" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="1e45d80060761fb885bc0fbaed53c3765f023201b89455d4fcb14a0de4b04257" name="cpupower-bench" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="ebf82dc776cf6b9fc083fc5aff9e68ffc5c1a25f58d617d0870968dcd5baf4c1" name="cpupower-bench" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="48a3d67e19c088bc6c297ca9338788304dacc5c0d6de62cea62f85be62a5512f" name="cpupower-bench" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="3df3a94dc54769310db74ac821e32653c503a0ca1e89c8f65167cfe427ed098b" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="6c2fe33ed200d7aa4683d1c61ab585d5efe2c2bbab168cf7a93b98a563016abe" name="cpupower-devel" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="7d554abf0393d13ce0bac621ddf7897e4924955d1ca2ea4083a6a741cc932aeb" name="cpupower-devel" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="ee4c2704ecd486ac483e5e80762e1279f62ee724d4acb94b21f029109fc2e86f" name="cpupower-devel" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="86e48a9821abd0cd800b211dcfd1f0d0f0891467ead45cfd14c5eaf2b5644491" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="20b3e0fd6059e0ab60315ed3da9dcd92c465597dff4ba324f8b94c442591270f" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.5.0+20230725.5d35bb6" rel="150500.3.5.1"/>
  <changelog author="XLiang@suse.com" date="1638878400">- Update to version 4.3.1+20211206.e34e2fff:
  * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
  * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
  * Dev: idmgmt: Avoid leading with number for ID
  * Dev: ui_cluster: Check service is available before enable/disable qdevice
  * Dev: ui_node: Improve node standby/online methods
  * Dev: ui_cluster: Remove node from node list if node is unreachable
  * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
  * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
  <changelog author="XLiang@suse.com" date="1640174400">- Update to version 4.3.1+20211210.a149de51:
  * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
  * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
  * Dev: log: In status_long function, add a blank line when exception
  * Revert "Dev: ui_cluster: Make sure node is online when stop service"</changelog>
  <changelog author="XLiang@suse.com" date="1644408000">- Update to version 4.4.0+20220208.5e6dca1d:
  * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
  * Dev: bootstrap: the joining node retries an active cluster
  * Dev: ui_node: Use diff and patch instead of replace cib
  * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
  * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
  * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
  * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
  * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
  * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
  * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
  * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
  * Dev: doc: Replace pingd as ocf:pacemaker:ping
  * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
  * Dev: ra: Support Promoted/Unpromoted
  * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
  * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
  * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
  * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
  * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
  * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
  * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
  * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
  * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
  * Dev: doc: Mention /etc/crm/profiles.yml in man crm
  * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
  * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon</changelog>
  <changelog author="XLiang@suse.com" date="1647864000">- Update to version 4.4.0+20220321.8cf6a9d1:
  * Dev: Parametrize the log dir
  * Dev: ui_cluster: Check if qdevice can contribute vote
  * Dev: qdevice: Improve remove qdevice process
  * Dev: qdevice: Add lock to protect for the same cluster name
  * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
  * medium: utils: update detect_cloud pattern for aws
  * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
  * Dev: lock: Make lock.py more generic
  * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
  * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
  * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
  * Dev: utils: Remove duplicated debug message</changelog>
  <changelog author="XLiang@suse.com" date="1657281600">- Update to version 4.4.0+20220708.6ed6b56f:
  * Fix: utils: use -o and -n to compare files instead of strings for crm_diff (bsc#1201312)
  * Dev: ui_cluster: Add examples for 'cluster init' and 'cluster join'
  * Dev: cibconfig: enable "related:" prefix to show the objects by given ra type
  * Fix: crm report: use sudo when under non root and hacluster user (bsc#1199634)
  * Fix: utils: wait4dc: Make change since output of 'crmadmin -S' changed(bsc#1199412)
  * Fix: bootstrap: stop and disable csync2.socket on removed node (bsc#1199325)
  * Fix: crm report: Read data in a save way, to avoid UnicodeDecodeError(bsc#1198180)</changelog>
  <changelog author="XLiang@suse.com" date="1660132800">- Update to version 4.4.1+20220809.4f90c4ef:
  * Dev: bootstrap: Don't open mgmt port since it's deprecated
  * Dev: bootstrap: Don't sync csync2 when peer node's csync2 service not ready
  * Dev: bootstrap: remove cluster add sub-command
  * Fix: bootstrap: -N option setup the current node and peers all together (bsc#1175863, jsc#PED-103, jsc#PED-779)
  * Dev: parallax: Add strict option to avoid raise exception when set to False</changelog>
  <changelog author="XLiang@suse.com" date="1663070400">- Update to version 4.4.1+20220913.57fa9d96:
  * Dev: add remote_auth to known stages of cluster init
  * Dev: refactor timeout caculation for sbd
  * Dev: Initial version of cryptctl setup script.
  * Dev: utils: Refactor class ServiceManager, to show all nodes' status when running in parallel
  * Dev: bootstrap: Add delay to start corosync when node list larger than 5 (bsc#1188653)
  * Dev: bootstrap: Show remote node name when stopping service remotely
  * Dev: log: print a full-width progress bar in status_progress to prevent interleaving with log messages
  * Dev: log: print begin and end marker in different lines in status_long
  * Dev: parallax: Add LogLevel=error ssh option to filter out warnings (bsc#1196726)
  * Revert "Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)" (bsc#1202655)
  * fix: configure: refresh cib before showing or modifying if no pending changes has been made (bsc#1202465)
  * Fix: bootstrap: Use crmsh.parallax instead of parallax module directly (bsc#1202006)
  * Dev: bootstrap: Generate public key from private key</changelog>
  <changelog author="XLiang@suse.com" date="1664366400">- Update to version 4.4.1+20220928.ded85d0a:
  * Dev: bootstrap: Adjust cluster properties including priority-fencing-delay
  * Fix: ui_cluster: 'crm cluster stop' failed to stop services (bsc#1203601)
  * Dev: bootstrap: Adjust pcmk_delay_max and stonith-timeout for all configured fence agents
  * Dev: cibconfig: "crm config show related:xxx" provides partial search among class, provider, type fields
  * Dev: bootstrap: Adjust sbd related timeout when add/remove qdevice
  * Fix: crash_test: do not use firewalld to isolate a cluster node (bsc#1192467)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1669204800">- Update to version 4.4.1+20221122.102a8e1:
  * Dev: bootstrap: fix passwordless ssh authentication for hacluster automatically when a new node is joining the cluster (bsc#1201785)
  * Dev: upgradeutil: automated init ssh passwordless auth for hacluster after upgrading (bsc#1201785)
  * Dev: report: collect ra trace files from specified directories (jsc#PED-121)
  * Dev: ui_resource: trace directory in log info should be changed dynamically (jsc#PED-121)
  * Dev: parse: cli_to_xml: populate advised monitor/start/stop operations values
  * fix: log: fail to open log file even if user is in haclient group (bsc#1204670)
  * Fix: sbd: Ask if overwrite when given sbd device on interactive mode(bsc#1201428)</changelog>
  <changelog author="XLiang@suse.com" date="1672401600">- Update to version 4.4.1+20221228.326c28fd:
  * Dev: ui_configure: Deprecate 'crm configure erase' sub-command
  * Fix: report: Catch read exception (bsc#1206606)
  * Fix: bootstrap: Unset SBD_DELAY_START when running 'crm cluster start' (bsc#1202177)
  * Dev: ui_node: Redirect `node delete` to `cluster remove`
  * Dev: bootstrap: Add option -x to skip csync2 initialization stage during the whole cluster bootstrap
  * Dev: ui_context: redirect `foo -h`/`foo --help` to `help foo` (bsc#1205735)
  * Fix: qdevice: Adjust SBD_WATCHDOG_TIMEOUT when configuring qdevice not using stage (bsc#1205727)
  * Fix: cibconfig: Complete promotable=true and interlave=true for Promoted/Unpromoted resource (bsc#1205522)
  * Fix: corosync: show corosync ring status if has fault (bsc#1205615)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1674475200">- Update to version 4.4.1+20230117.fb8b3c2b:
  * Dev: healthcheck: allow using non-root sudoer for remote access (jsc#PED-290)
  * Dev: bootstrap: implement swapping hacluster's ssh key using non-root sudoer remote access (jsc#PED-290)
  * Dev: utils: Check current user's privilege and give hints to user (jsc#PED-290)
  * Feature: replace root by a custom user with root privileges (jsc#PED-290)</changelog>
  <changelog author="XLiang@suse.com" date="1676635200">- Update to version 4.4.1+20230217.7fe11a5c:
  * Dev: report: Enable crm report for sudoer user
  * Dev: bootstrap: allow the cluster to operate with ssh session under non-root sudoer (jsc#PED-290)
  * Dev: utils: Add sudo for the commands in user hints
  * Fix: hawk fails to parse the slash (bsc#1206217)
  * Fix: extra logs while configuring passwordless (bsc#1207720)</changelog>
  <changelog author="XLiang@suse.com" date="1677240000">- Update to version 4.4.1+20230224.498677ab:
  * Dev: upgradeutil: do upgrade silently (bsc#1208327, bsc#1206183)
  * Fix: bootstrap: `crm cluster join ssh` raises TypeError (bsc#1208327)
  * Dev: utils: Change the way to get pacemaker's version (bsc#1208216)</changelog>
  <changelog author="XLiang@suse.com" date="1677844800">- Update to version 4.4.1+20230302.2b5310b9:
  * Fix: qdevice: Unable to setup qdevice under non-root user (bsc#1208770)</changelog>
  <changelog author="XLiang@suse.com" date="1678449600">- Update to version 4.5.0+20230309.a4c4192d:
  * Dev: version: Bump crmsh version to 4.5.0
  * Fix: report: Fix crm report issue under non-root user
  * Fix: log: Redirect debug messages into stderr (bsc#1208991)</changelog>
  <changelog author="XLiang@suse.com" date="1680177600">- Update to version 4.5.0+20230329.6d95249b:
  * Fix: utils: qdevice initialization should user_pair_for_ssh() to get appreciated users
  * Fix: crm report: sustain if there are offline nodes (bsc#1209480)
  * Fix: validate ssh session when the users is determined by guessing (bsc#1209193)
  * Fix: parallax: Use 'sudo bash -c' when executing commands via sudoer (bsc#1209192)</changelog>
  <changelog author="XLiang@suse.com" date="1682683200">- Update to version 4.5.0+20230427.11d11104:
  * Fix: bootstrap: crm cluster join default behavior change in ssh key handling (bsc#1210693)
  * Fix: help: Long time to load and parse crm.8.adoc (bsc#1210198)
  * Fix: cibconfig: use any existing rsc_defaults set rather than create another one (bsc#1210614)
  * Fix: lock: Join node failed to wait init node finished (bsc#1210332)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1683806400">- Update to version 4.5.0+20230510.847a251:
  * Fix: bootstrap: `init --qnetd-hostname` fails when username is not specified (bsc#1211200)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1688731200">- Update to version 4.5.0+20230705.ea8c76f:
  * Fix: ui_context: wait4dc should assume a subcommand completes successfully if no exceptions are raised (bsc#1212992)
  * Fix: upgradeutil: do not tried to upgrade when the cluster is partially set up (bsc#1211817)
  * Fix: bootstrap: fix the validation of option -N and -c (bsc#1212436)
  * Fix: geo_cluster: the behavior of choosing a default user in geo_join/geo_init_arbitrator is different with `cluster join` (bsc#1211817)
  * Fix: utils: do not use sudoer user to create ssh session unless it is specified explicitly (bsc#1211817)
  * medium: ui_node: fix cib rollback race on node standby
  * Dev: ui_cluster: Use 'CustomAppendAction' instead of 'append' argparse action
  * Dev: bootstrap: Configure ssh key when fetch geo config (bsc#1210709)
  * Dev: cmd_status: Use --output-as option instead of deprecated --as-html and --as-xml options
  * Dev: cmd_status: Append 'with quorum' and 'WITHOUT quorum' to display keyword list
  * Fix: bootstrap: failed to save username for localhost when initializing a cluster with a qnet server
  * Fix: utils: fix `cluster diff --checksum` (bsc#1210709)
  * Dev: geo: implement non-root support for geo_fetch_config() (bsc#1210709)
  * Fix: bootstrap: failed to join when the cluster is initialized with skip_csync2 (bsc#1210709)
  * Dev: prun: implement timeout (bsc#1210709)
  * Dev: prun: add an concurrency limiter (bsc#1210709)
  * Dev: scripts: implement non-root support with crmsh.prun (bsc#1210709)
  * Dev: implement non-root support for crm_pssh with crmsh.prun (bsc#1210709)
  * Dev: refine non-root sudoer support for crmsh.parallax (bsc#1210709)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1690545600">- Update to version 4.5.0+20230725.5d35bb6:
  * Fix: upgradeutil: support the change of path of upgrade_seq in crmsh-4.5 (bsc#1213050)</changelog>
</package>
<package pkgid="089974a70fc3d25dbb350aa392398f839e27804bab401323582e453b56d3ea23" name="crmsh" arch="src">
  <version epoch="0" ver="4.5.0+20230725.5d35bb6" rel="150500.3.5.1"/>
  <changelog author="XLiang@suse.com" date="1638878400">- Update to version 4.3.1+20211206.e34e2fff:
  * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
  * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
  * Dev: idmgmt: Avoid leading with number for ID
  * Dev: ui_cluster: Check service is available before enable/disable qdevice
  * Dev: ui_node: Improve node standby/online methods
  * Dev: ui_cluster: Remove node from node list if node is unreachable
  * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
  * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
  <changelog author="XLiang@suse.com" date="1640174400">- Update to version 4.3.1+20211210.a149de51:
  * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
  * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
  * Dev: log: In status_long function, add a blank line when exception
  * Revert "Dev: ui_cluster: Make sure node is online when stop service"</changelog>
  <changelog author="XLiang@suse.com" date="1644408000">- Update to version 4.4.0+20220208.5e6dca1d:
  * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
  * Dev: bootstrap: the joining node retries an active cluster
  * Dev: ui_node: Use diff and patch instead of replace cib
  * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
  * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
  * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
  * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
  * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
  * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
  * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
  * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
  * Dev: doc: Replace pingd as ocf:pacemaker:ping
  * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
  * Dev: ra: Support Promoted/Unpromoted
  * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
  * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
  * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
  * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
  * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
  * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
  * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
  * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
  * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
  * Dev: doc: Mention /etc/crm/profiles.yml in man crm
  * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
  * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon</changelog>
  <changelog author="XLiang@suse.com" date="1647864000">- Update to version 4.4.0+20220321.8cf6a9d1:
  * Dev: Parametrize the log dir
  * Dev: ui_cluster: Check if qdevice can contribute vote
  * Dev: qdevice: Improve remove qdevice process
  * Dev: qdevice: Add lock to protect for the same cluster name
  * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
  * medium: utils: update detect_cloud pattern for aws
  * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
  * Dev: lock: Make lock.py more generic
  * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
  * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
  * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
  * Dev: utils: Remove duplicated debug message</changelog>
  <changelog author="XLiang@suse.com" date="1657281600">- Update to version 4.4.0+20220708.6ed6b56f:
  * Fix: utils: use -o and -n to compare files instead of strings for crm_diff (bsc#1201312)
  * Dev: ui_cluster: Add examples for 'cluster init' and 'cluster join'
  * Dev: cibconfig: enable "related:" prefix to show the objects by given ra type
  * Fix: crm report: use sudo when under non root and hacluster user (bsc#1199634)
  * Fix: utils: wait4dc: Make change since output of 'crmadmin -S' changed(bsc#1199412)
  * Fix: bootstrap: stop and disable csync2.socket on removed node (bsc#1199325)
  * Fix: crm report: Read data in a save way, to avoid UnicodeDecodeError(bsc#1198180)</changelog>
  <changelog author="XLiang@suse.com" date="1660132800">- Update to version 4.4.1+20220809.4f90c4ef:
  * Dev: bootstrap: Don't open mgmt port since it's deprecated
  * Dev: bootstrap: Don't sync csync2 when peer node's csync2 service not ready
  * Dev: bootstrap: remove cluster add sub-command
  * Fix: bootstrap: -N option setup the current node and peers all together (bsc#1175863, jsc#PED-103, jsc#PED-779)
  * Dev: parallax: Add strict option to avoid raise exception when set to False</changelog>
  <changelog author="XLiang@suse.com" date="1663070400">- Update to version 4.4.1+20220913.57fa9d96:
  * Dev: add remote_auth to known stages of cluster init
  * Dev: refactor timeout caculation for sbd
  * Dev: Initial version of cryptctl setup script.
  * Dev: utils: Refactor class ServiceManager, to show all nodes' status when running in parallel
  * Dev: bootstrap: Add delay to start corosync when node list larger than 5 (bsc#1188653)
  * Dev: bootstrap: Show remote node name when stopping service remotely
  * Dev: log: print a full-width progress bar in status_progress to prevent interleaving with log messages
  * Dev: log: print begin and end marker in different lines in status_long
  * Dev: parallax: Add LogLevel=error ssh option to filter out warnings (bsc#1196726)
  * Revert "Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)" (bsc#1202655)
  * fix: configure: refresh cib before showing or modifying if no pending changes has been made (bsc#1202465)
  * Fix: bootstrap: Use crmsh.parallax instead of parallax module directly (bsc#1202006)
  * Dev: bootstrap: Generate public key from private key</changelog>
  <changelog author="XLiang@suse.com" date="1664366400">- Update to version 4.4.1+20220928.ded85d0a:
  * Dev: bootstrap: Adjust cluster properties including priority-fencing-delay
  * Fix: ui_cluster: 'crm cluster stop' failed to stop services (bsc#1203601)
  * Dev: bootstrap: Adjust pcmk_delay_max and stonith-timeout for all configured fence agents
  * Dev: cibconfig: "crm config show related:xxx" provides partial search among class, provider, type fields
  * Dev: bootstrap: Adjust sbd related timeout when add/remove qdevice
  * Fix: crash_test: do not use firewalld to isolate a cluster node (bsc#1192467)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1669204800">- Update to version 4.4.1+20221122.102a8e1:
  * Dev: bootstrap: fix passwordless ssh authentication for hacluster automatically when a new node is joining the cluster (bsc#1201785)
  * Dev: upgradeutil: automated init ssh passwordless auth for hacluster after upgrading (bsc#1201785)
  * Dev: report: collect ra trace files from specified directories (jsc#PED-121)
  * Dev: ui_resource: trace directory in log info should be changed dynamically (jsc#PED-121)
  * Dev: parse: cli_to_xml: populate advised monitor/start/stop operations values
  * fix: log: fail to open log file even if user is in haclient group (bsc#1204670)
  * Fix: sbd: Ask if overwrite when given sbd device on interactive mode(bsc#1201428)</changelog>
  <changelog author="XLiang@suse.com" date="1672401600">- Update to version 4.4.1+20221228.326c28fd:
  * Dev: ui_configure: Deprecate 'crm configure erase' sub-command
  * Fix: report: Catch read exception (bsc#1206606)
  * Fix: bootstrap: Unset SBD_DELAY_START when running 'crm cluster start' (bsc#1202177)
  * Dev: ui_node: Redirect `node delete` to `cluster remove`
  * Dev: bootstrap: Add option -x to skip csync2 initialization stage during the whole cluster bootstrap
  * Dev: ui_context: redirect `foo -h`/`foo --help` to `help foo` (bsc#1205735)
  * Fix: qdevice: Adjust SBD_WATCHDOG_TIMEOUT when configuring qdevice not using stage (bsc#1205727)
  * Fix: cibconfig: Complete promotable=true and interlave=true for Promoted/Unpromoted resource (bsc#1205522)
  * Fix: corosync: show corosync ring status if has fault (bsc#1205615)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1674475200">- Update to version 4.4.1+20230117.fb8b3c2b:
  * Dev: healthcheck: allow using non-root sudoer for remote access (jsc#PED-290)
  * Dev: bootstrap: implement swapping hacluster's ssh key using non-root sudoer remote access (jsc#PED-290)
  * Dev: utils: Check current user's privilege and give hints to user (jsc#PED-290)
  * Feature: replace root by a custom user with root privileges (jsc#PED-290)</changelog>
  <changelog author="XLiang@suse.com" date="1676635200">- Update to version 4.4.1+20230217.7fe11a5c:
  * Dev: report: Enable crm report for sudoer user
  * Dev: bootstrap: allow the cluster to operate with ssh session under non-root sudoer (jsc#PED-290)
  * Dev: utils: Add sudo for the commands in user hints
  * Fix: hawk fails to parse the slash (bsc#1206217)
  * Fix: extra logs while configuring passwordless (bsc#1207720)</changelog>
  <changelog author="XLiang@suse.com" date="1677240000">- Update to version 4.4.1+20230224.498677ab:
  * Dev: upgradeutil: do upgrade silently (bsc#1208327, bsc#1206183)
  * Fix: bootstrap: `crm cluster join ssh` raises TypeError (bsc#1208327)
  * Dev: utils: Change the way to get pacemaker's version (bsc#1208216)</changelog>
  <changelog author="XLiang@suse.com" date="1677844800">- Update to version 4.4.1+20230302.2b5310b9:
  * Fix: qdevice: Unable to setup qdevice under non-root user (bsc#1208770)</changelog>
  <changelog author="XLiang@suse.com" date="1678449600">- Update to version 4.5.0+20230309.a4c4192d:
  * Dev: version: Bump crmsh version to 4.5.0
  * Fix: report: Fix crm report issue under non-root user
  * Fix: log: Redirect debug messages into stderr (bsc#1208991)</changelog>
  <changelog author="XLiang@suse.com" date="1680177600">- Update to version 4.5.0+20230329.6d95249b:
  * Fix: utils: qdevice initialization should user_pair_for_ssh() to get appreciated users
  * Fix: crm report: sustain if there are offline nodes (bsc#1209480)
  * Fix: validate ssh session when the users is determined by guessing (bsc#1209193)
  * Fix: parallax: Use 'sudo bash -c' when executing commands via sudoer (bsc#1209192)</changelog>
  <changelog author="XLiang@suse.com" date="1682683200">- Update to version 4.5.0+20230427.11d11104:
  * Fix: bootstrap: crm cluster join default behavior change in ssh key handling (bsc#1210693)
  * Fix: help: Long time to load and parse crm.8.adoc (bsc#1210198)
  * Fix: cibconfig: use any existing rsc_defaults set rather than create another one (bsc#1210614)
  * Fix: lock: Join node failed to wait init node finished (bsc#1210332)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1683806400">- Update to version 4.5.0+20230510.847a251:
  * Fix: bootstrap: `init --qnetd-hostname` fails when username is not specified (bsc#1211200)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1688731200">- Update to version 4.5.0+20230705.ea8c76f:
  * Fix: ui_context: wait4dc should assume a subcommand completes successfully if no exceptions are raised (bsc#1212992)
  * Fix: upgradeutil: do not tried to upgrade when the cluster is partially set up (bsc#1211817)
  * Fix: bootstrap: fix the validation of option -N and -c (bsc#1212436)
  * Fix: geo_cluster: the behavior of choosing a default user in geo_join/geo_init_arbitrator is different with `cluster join` (bsc#1211817)
  * Fix: utils: do not use sudoer user to create ssh session unless it is specified explicitly (bsc#1211817)
  * medium: ui_node: fix cib rollback race on node standby
  * Dev: ui_cluster: Use 'CustomAppendAction' instead of 'append' argparse action
  * Dev: bootstrap: Configure ssh key when fetch geo config (bsc#1210709)
  * Dev: cmd_status: Use --output-as option instead of deprecated --as-html and --as-xml options
  * Dev: cmd_status: Append 'with quorum' and 'WITHOUT quorum' to display keyword list
  * Fix: bootstrap: failed to save username for localhost when initializing a cluster with a qnet server
  * Fix: utils: fix `cluster diff --checksum` (bsc#1210709)
  * Dev: geo: implement non-root support for geo_fetch_config() (bsc#1210709)
  * Fix: bootstrap: failed to join when the cluster is initialized with skip_csync2 (bsc#1210709)
  * Dev: prun: implement timeout (bsc#1210709)
  * Dev: prun: add an concurrency limiter (bsc#1210709)
  * Dev: scripts: implement non-root support with crmsh.prun (bsc#1210709)
  * Dev: implement non-root support for crm_pssh with crmsh.prun (bsc#1210709)
  * Dev: refine non-root sudoer support for crmsh.parallax (bsc#1210709)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1690545600">- Update to version 4.5.0+20230725.5d35bb6:
  * Fix: upgradeutil: support the change of path of upgrade_seq in crmsh-4.5 (bsc#1213050)</changelog>
</package>
<package pkgid="6c4909a073964c9dea2356e1a1fffce11e69c26c6cc17fc5b6409ae440c52941" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.5.0+20230725.5d35bb6" rel="150500.3.5.1"/>
  <changelog author="XLiang@suse.com" date="1638878400">- Update to version 4.3.1+20211206.e34e2fff:
  * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
  * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
  * Dev: idmgmt: Avoid leading with number for ID
  * Dev: ui_cluster: Check service is available before enable/disable qdevice
  * Dev: ui_node: Improve node standby/online methods
  * Dev: ui_cluster: Remove node from node list if node is unreachable
  * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
  * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
  <changelog author="XLiang@suse.com" date="1640174400">- Update to version 4.3.1+20211210.a149de51:
  * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
  * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
  * Dev: log: In status_long function, add a blank line when exception
  * Revert "Dev: ui_cluster: Make sure node is online when stop service"</changelog>
  <changelog author="XLiang@suse.com" date="1644408000">- Update to version 4.4.0+20220208.5e6dca1d:
  * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
  * Dev: bootstrap: the joining node retries an active cluster
  * Dev: ui_node: Use diff and patch instead of replace cib
  * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
  * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
  * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
  * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
  * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
  * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
  * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
  * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
  * Dev: doc: Replace pingd as ocf:pacemaker:ping
  * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
  * Dev: ra: Support Promoted/Unpromoted
  * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
  * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
  * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
  * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
  * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
  * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
  * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
  * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
  * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
  * Dev: doc: Mention /etc/crm/profiles.yml in man crm
  * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
  * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon</changelog>
  <changelog author="XLiang@suse.com" date="1647864000">- Update to version 4.4.0+20220321.8cf6a9d1:
  * Dev: Parametrize the log dir
  * Dev: ui_cluster: Check if qdevice can contribute vote
  * Dev: qdevice: Improve remove qdevice process
  * Dev: qdevice: Add lock to protect for the same cluster name
  * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
  * medium: utils: update detect_cloud pattern for aws
  * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
  * Dev: lock: Make lock.py more generic
  * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
  * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
  * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
  * Dev: utils: Remove duplicated debug message</changelog>
  <changelog author="XLiang@suse.com" date="1657281600">- Update to version 4.4.0+20220708.6ed6b56f:
  * Fix: utils: use -o and -n to compare files instead of strings for crm_diff (bsc#1201312)
  * Dev: ui_cluster: Add examples for 'cluster init' and 'cluster join'
  * Dev: cibconfig: enable "related:" prefix to show the objects by given ra type
  * Fix: crm report: use sudo when under non root and hacluster user (bsc#1199634)
  * Fix: utils: wait4dc: Make change since output of 'crmadmin -S' changed(bsc#1199412)
  * Fix: bootstrap: stop and disable csync2.socket on removed node (bsc#1199325)
  * Fix: crm report: Read data in a save way, to avoid UnicodeDecodeError(bsc#1198180)</changelog>
  <changelog author="XLiang@suse.com" date="1660132800">- Update to version 4.4.1+20220809.4f90c4ef:
  * Dev: bootstrap: Don't open mgmt port since it's deprecated
  * Dev: bootstrap: Don't sync csync2 when peer node's csync2 service not ready
  * Dev: bootstrap: remove cluster add sub-command
  * Fix: bootstrap: -N option setup the current node and peers all together (bsc#1175863, jsc#PED-103, jsc#PED-779)
  * Dev: parallax: Add strict option to avoid raise exception when set to False</changelog>
  <changelog author="XLiang@suse.com" date="1663070400">- Update to version 4.4.1+20220913.57fa9d96:
  * Dev: add remote_auth to known stages of cluster init
  * Dev: refactor timeout caculation for sbd
  * Dev: Initial version of cryptctl setup script.
  * Dev: utils: Refactor class ServiceManager, to show all nodes' status when running in parallel
  * Dev: bootstrap: Add delay to start corosync when node list larger than 5 (bsc#1188653)
  * Dev: bootstrap: Show remote node name when stopping service remotely
  * Dev: log: print a full-width progress bar in status_progress to prevent interleaving with log messages
  * Dev: log: print begin and end marker in different lines in status_long
  * Dev: parallax: Add LogLevel=error ssh option to filter out warnings (bsc#1196726)
  * Revert "Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)" (bsc#1202655)
  * fix: configure: refresh cib before showing or modifying if no pending changes has been made (bsc#1202465)
  * Fix: bootstrap: Use crmsh.parallax instead of parallax module directly (bsc#1202006)
  * Dev: bootstrap: Generate public key from private key</changelog>
  <changelog author="XLiang@suse.com" date="1664366400">- Update to version 4.4.1+20220928.ded85d0a:
  * Dev: bootstrap: Adjust cluster properties including priority-fencing-delay
  * Fix: ui_cluster: 'crm cluster stop' failed to stop services (bsc#1203601)
  * Dev: bootstrap: Adjust pcmk_delay_max and stonith-timeout for all configured fence agents
  * Dev: cibconfig: "crm config show related:xxx" provides partial search among class, provider, type fields
  * Dev: bootstrap: Adjust sbd related timeout when add/remove qdevice
  * Fix: crash_test: do not use firewalld to isolate a cluster node (bsc#1192467)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1669204800">- Update to version 4.4.1+20221122.102a8e1:
  * Dev: bootstrap: fix passwordless ssh authentication for hacluster automatically when a new node is joining the cluster (bsc#1201785)
  * Dev: upgradeutil: automated init ssh passwordless auth for hacluster after upgrading (bsc#1201785)
  * Dev: report: collect ra trace files from specified directories (jsc#PED-121)
  * Dev: ui_resource: trace directory in log info should be changed dynamically (jsc#PED-121)
  * Dev: parse: cli_to_xml: populate advised monitor/start/stop operations values
  * fix: log: fail to open log file even if user is in haclient group (bsc#1204670)
  * Fix: sbd: Ask if overwrite when given sbd device on interactive mode(bsc#1201428)</changelog>
  <changelog author="XLiang@suse.com" date="1672401600">- Update to version 4.4.1+20221228.326c28fd:
  * Dev: ui_configure: Deprecate 'crm configure erase' sub-command
  * Fix: report: Catch read exception (bsc#1206606)
  * Fix: bootstrap: Unset SBD_DELAY_START when running 'crm cluster start' (bsc#1202177)
  * Dev: ui_node: Redirect `node delete` to `cluster remove`
  * Dev: bootstrap: Add option -x to skip csync2 initialization stage during the whole cluster bootstrap
  * Dev: ui_context: redirect `foo -h`/`foo --help` to `help foo` (bsc#1205735)
  * Fix: qdevice: Adjust SBD_WATCHDOG_TIMEOUT when configuring qdevice not using stage (bsc#1205727)
  * Fix: cibconfig: Complete promotable=true and interlave=true for Promoted/Unpromoted resource (bsc#1205522)
  * Fix: corosync: show corosync ring status if has fault (bsc#1205615)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1674475200">- Update to version 4.4.1+20230117.fb8b3c2b:
  * Dev: healthcheck: allow using non-root sudoer for remote access (jsc#PED-290)
  * Dev: bootstrap: implement swapping hacluster's ssh key using non-root sudoer remote access (jsc#PED-290)
  * Dev: utils: Check current user's privilege and give hints to user (jsc#PED-290)
  * Feature: replace root by a custom user with root privileges (jsc#PED-290)</changelog>
  <changelog author="XLiang@suse.com" date="1676635200">- Update to version 4.4.1+20230217.7fe11a5c:
  * Dev: report: Enable crm report for sudoer user
  * Dev: bootstrap: allow the cluster to operate with ssh session under non-root sudoer (jsc#PED-290)
  * Dev: utils: Add sudo for the commands in user hints
  * Fix: hawk fails to parse the slash (bsc#1206217)
  * Fix: extra logs while configuring passwordless (bsc#1207720)</changelog>
  <changelog author="XLiang@suse.com" date="1677240000">- Update to version 4.4.1+20230224.498677ab:
  * Dev: upgradeutil: do upgrade silently (bsc#1208327, bsc#1206183)
  * Fix: bootstrap: `crm cluster join ssh` raises TypeError (bsc#1208327)
  * Dev: utils: Change the way to get pacemaker's version (bsc#1208216)</changelog>
  <changelog author="XLiang@suse.com" date="1677844800">- Update to version 4.4.1+20230302.2b5310b9:
  * Fix: qdevice: Unable to setup qdevice under non-root user (bsc#1208770)</changelog>
  <changelog author="XLiang@suse.com" date="1678449600">- Update to version 4.5.0+20230309.a4c4192d:
  * Dev: version: Bump crmsh version to 4.5.0
  * Fix: report: Fix crm report issue under non-root user
  * Fix: log: Redirect debug messages into stderr (bsc#1208991)</changelog>
  <changelog author="XLiang@suse.com" date="1680177600">- Update to version 4.5.0+20230329.6d95249b:
  * Fix: utils: qdevice initialization should user_pair_for_ssh() to get appreciated users
  * Fix: crm report: sustain if there are offline nodes (bsc#1209480)
  * Fix: validate ssh session when the users is determined by guessing (bsc#1209193)
  * Fix: parallax: Use 'sudo bash -c' when executing commands via sudoer (bsc#1209192)</changelog>
  <changelog author="XLiang@suse.com" date="1682683200">- Update to version 4.5.0+20230427.11d11104:
  * Fix: bootstrap: crm cluster join default behavior change in ssh key handling (bsc#1210693)
  * Fix: help: Long time to load and parse crm.8.adoc (bsc#1210198)
  * Fix: cibconfig: use any existing rsc_defaults set rather than create another one (bsc#1210614)
  * Fix: lock: Join node failed to wait init node finished (bsc#1210332)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1683806400">- Update to version 4.5.0+20230510.847a251:
  * Fix: bootstrap: `init --qnetd-hostname` fails when username is not specified (bsc#1211200)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1688731200">- Update to version 4.5.0+20230705.ea8c76f:
  * Fix: ui_context: wait4dc should assume a subcommand completes successfully if no exceptions are raised (bsc#1212992)
  * Fix: upgradeutil: do not tried to upgrade when the cluster is partially set up (bsc#1211817)
  * Fix: bootstrap: fix the validation of option -N and -c (bsc#1212436)
  * Fix: geo_cluster: the behavior of choosing a default user in geo_join/geo_init_arbitrator is different with `cluster join` (bsc#1211817)
  * Fix: utils: do not use sudoer user to create ssh session unless it is specified explicitly (bsc#1211817)
  * medium: ui_node: fix cib rollback race on node standby
  * Dev: ui_cluster: Use 'CustomAppendAction' instead of 'append' argparse action
  * Dev: bootstrap: Configure ssh key when fetch geo config (bsc#1210709)
  * Dev: cmd_status: Use --output-as option instead of deprecated --as-html and --as-xml options
  * Dev: cmd_status: Append 'with quorum' and 'WITHOUT quorum' to display keyword list
  * Fix: bootstrap: failed to save username for localhost when initializing a cluster with a qnet server
  * Fix: utils: fix `cluster diff --checksum` (bsc#1210709)
  * Dev: geo: implement non-root support for geo_fetch_config() (bsc#1210709)
  * Fix: bootstrap: failed to join when the cluster is initialized with skip_csync2 (bsc#1210709)
  * Dev: prun: implement timeout (bsc#1210709)
  * Dev: prun: add an concurrency limiter (bsc#1210709)
  * Dev: scripts: implement non-root support with crmsh.prun (bsc#1210709)
  * Dev: implement non-root support for crm_pssh with crmsh.prun (bsc#1210709)
  * Dev: refine non-root sudoer support for crmsh.parallax (bsc#1210709)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1690545600">- Update to version 4.5.0+20230725.5d35bb6:
  * Fix: upgradeutil: support the change of path of upgrade_seq in crmsh-4.5 (bsc#1213050)</changelog>
</package>
<package pkgid="22f8d882f3eaf3cd1f6b3b8392893ae38b72c4f758670953fa6a1b0e63e5398b" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.5.0+20230725.5d35bb6" rel="150500.3.5.1"/>
  <changelog author="XLiang@suse.com" date="1638878400">- Update to version 4.3.1+20211206.e34e2fff:
  * Dev: sbd: Adjust timeout related values (jsc#SLE-22492)
  * Dev: ui_cluster: check if qdevice service started when starting cluster if qdevice configured
  * Dev: idmgmt: Avoid leading with number for ID
  * Dev: ui_cluster: Check service is available before enable/disable qdevice
  * Dev: ui_node: Improve node standby/online methods
  * Dev: ui_cluster: Remove node from node list if node is unreachable
  * Dev: Give warning when no-quorum-policy not set as freeze while using DLM
  * Fix: crm: To avoid the potential "permission denied" error under other users (boo#1192754)
  * Fix: ui_resource: Parse node and lifetime correctly (bsc#1192618)</changelog>
  <changelog author="XLiang@suse.com" date="1640174400">- Update to version 4.3.1+20211210.a149de51:
  * Dev: ui_cluster: Exit stop process when there is no DC (jsc#SLE-22497)
  * Dev: ui_cluster: check dlm controld ra is running when stop cluster (jsc#SLE-22497)
  * Dev: log: In status_long function, add a blank line when exception
  * Revert "Dev: ui_cluster: Make sure node is online when stop service"</changelog>
  <changelog author="XLiang@suse.com" date="1644408000">- Update to version 4.4.0+20220208.5e6dca1d:
  * Fix: sbd: not overwrite SYSCONFIG_SBD and sbd-disk-metadata if input 'n'(bsc#1194870)
  * Dev: bootstrap: the joining node retries an active cluster
  * Dev: ui_node: Use diff and patch instead of replace cib
  * Fix: bootstrap: Don't change pacemaker.service bootup preference (bsc#1194616)
  * Fix: spec: Add "BuildRequires: python-rpm-macros" to spec file (bsc#1194751)
  * Fix: log: Change the log file owner as hacluster:haclient (bsc#1194619)
  * Dev: crm.conf: Add OCF_1_1_SUPPORT flag to control ocf 1.1 feature
  * Dev: doc: Introduce promotable clone and role Promoted/Unpromoted
  * Fix: crash_test: Adjust help output of 'crm cluster crash_test -h'(bsc#1194615)
  * Dev: utils: Convert Master/Slave to Promoted/Unpromoted if schema support OCF 1.1
  * Dev: xmlutil: Replace Promoted/Unpromoted as Master/Slave when OCF 1.0 schema detected
  * Dev: doc: Replace pingd as ocf:pacemaker:ping
  * Dev: ui_resource: set target-role as Promoted/Unpromoted when doing promote or demote
  * Dev: ra: Support Promoted/Unpromoted
  * Dev: ocfs2: Fix running ocfs2 stage on cluster with diskless-sbd
  * Fix: bootstrap: Change default transport type as udpu(unicast) (bsc#1132375)
  * Dev: bootstrap: Avoid duplicated setting for rsc_defaults
  * Fix: ui_configure: Give a deprecated warning when using "ms" subcommand (bsc#1194125)
  * Fix: xmlutil: Parse promotable clone correctly and also consider compatibility (bsc#1194125)
  * Dev: doc: Rename hb_report as crm report (jsc#SLE-22499)
  * Dev: crm_report: Integrate report log into crmsh logging (jsc#SLE-22499)
  * Fix: bootstrap: Change log info when need to change user login shell (bsc#1194026)
  * Dev: crm_report: Move hb_report directory to crmsh/report (jsc#SLE-22499)
  * Dev: doc: Mention /etc/crm/profiles.yml in man crm
  * Dev: ui_node: Delete node directly using cibadmin if crm_node -R failed
  * Dev: xmlutil: Add class CrmMonXmlParser to parse xml output of crm_mon</changelog>
  <changelog author="XLiang@suse.com" date="1647864000">- Update to version 4.4.0+20220321.8cf6a9d1:
  * Dev: Parametrize the log dir
  * Dev: ui_cluster: Check if qdevice can contribute vote
  * Dev: qdevice: Improve remove qdevice process
  * Dev: qdevice: Add lock to protect for the same cluster name
  * Fix: qdevice: Add lock to protect init_db_on_qnetd function (bsc#1197323)
  * medium: utils: update detect_cloud pattern for aws
  * Dev: qdevice: Consolidate qdevice related separate functions into qdevice.QDevice class
  * Dev: lock: Make lock.py more generic
  * Dev: qdevice: Add cluster name suffix to qdevice-net-node.crq on qnet
  * Dev: qdevice: remove askpass since it's unnecessary after passwordless configured on qnetd
  * Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)
  * Dev: utils: Remove duplicated debug message</changelog>
  <changelog author="XLiang@suse.com" date="1657281600">- Update to version 4.4.0+20220708.6ed6b56f:
  * Fix: utils: use -o and -n to compare files instead of strings for crm_diff (bsc#1201312)
  * Dev: ui_cluster: Add examples for 'cluster init' and 'cluster join'
  * Dev: cibconfig: enable "related:" prefix to show the objects by given ra type
  * Fix: crm report: use sudo when under non root and hacluster user (bsc#1199634)
  * Fix: utils: wait4dc: Make change since output of 'crmadmin -S' changed(bsc#1199412)
  * Fix: bootstrap: stop and disable csync2.socket on removed node (bsc#1199325)
  * Fix: crm report: Read data in a save way, to avoid UnicodeDecodeError(bsc#1198180)</changelog>
  <changelog author="XLiang@suse.com" date="1660132800">- Update to version 4.4.1+20220809.4f90c4ef:
  * Dev: bootstrap: Don't open mgmt port since it's deprecated
  * Dev: bootstrap: Don't sync csync2 when peer node's csync2 service not ready
  * Dev: bootstrap: remove cluster add sub-command
  * Fix: bootstrap: -N option setup the current node and peers all together (bsc#1175863, jsc#PED-103, jsc#PED-779)
  * Dev: parallax: Add strict option to avoid raise exception when set to False</changelog>
  <changelog author="XLiang@suse.com" date="1663070400">- Update to version 4.4.1+20220913.57fa9d96:
  * Dev: add remote_auth to known stages of cluster init
  * Dev: refactor timeout caculation for sbd
  * Dev: Initial version of cryptctl setup script.
  * Dev: utils: Refactor class ServiceManager, to show all nodes' status when running in parallel
  * Dev: bootstrap: Add delay to start corosync when node list larger than 5 (bsc#1188653)
  * Dev: bootstrap: Show remote node name when stopping service remotely
  * Dev: log: print a full-width progress bar in status_progress to prevent interleaving with log messages
  * Dev: log: print begin and end marker in different lines in status_long
  * Dev: parallax: Add LogLevel=error ssh option to filter out warnings (bsc#1196726)
  * Revert "Fix: utils: Only raise exception when return code of systemctl command over ssh larger than 4 (bsc#1196726)" (bsc#1202655)
  * fix: configure: refresh cib before showing or modifying if no pending changes has been made (bsc#1202465)
  * Fix: bootstrap: Use crmsh.parallax instead of parallax module directly (bsc#1202006)
  * Dev: bootstrap: Generate public key from private key</changelog>
  <changelog author="XLiang@suse.com" date="1664366400">- Update to version 4.4.1+20220928.ded85d0a:
  * Dev: bootstrap: Adjust cluster properties including priority-fencing-delay
  * Fix: ui_cluster: 'crm cluster stop' failed to stop services (bsc#1203601)
  * Dev: bootstrap: Adjust pcmk_delay_max and stonith-timeout for all configured fence agents
  * Dev: cibconfig: "crm config show related:xxx" provides partial search among class, provider, type fields
  * Dev: bootstrap: Adjust sbd related timeout when add/remove qdevice
  * Fix: crash_test: do not use firewalld to isolate a cluster node (bsc#1192467)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1669204800">- Update to version 4.4.1+20221122.102a8e1:
  * Dev: bootstrap: fix passwordless ssh authentication for hacluster automatically when a new node is joining the cluster (bsc#1201785)
  * Dev: upgradeutil: automated init ssh passwordless auth for hacluster after upgrading (bsc#1201785)
  * Dev: report: collect ra trace files from specified directories (jsc#PED-121)
  * Dev: ui_resource: trace directory in log info should be changed dynamically (jsc#PED-121)
  * Dev: parse: cli_to_xml: populate advised monitor/start/stop operations values
  * fix: log: fail to open log file even if user is in haclient group (bsc#1204670)
  * Fix: sbd: Ask if overwrite when given sbd device on interactive mode(bsc#1201428)</changelog>
  <changelog author="XLiang@suse.com" date="1672401600">- Update to version 4.4.1+20221228.326c28fd:
  * Dev: ui_configure: Deprecate 'crm configure erase' sub-command
  * Fix: report: Catch read exception (bsc#1206606)
  * Fix: bootstrap: Unset SBD_DELAY_START when running 'crm cluster start' (bsc#1202177)
  * Dev: ui_node: Redirect `node delete` to `cluster remove`
  * Dev: bootstrap: Add option -x to skip csync2 initialization stage during the whole cluster bootstrap
  * Dev: ui_context: redirect `foo -h`/`foo --help` to `help foo` (bsc#1205735)
  * Fix: qdevice: Adjust SBD_WATCHDOG_TIMEOUT when configuring qdevice not using stage (bsc#1205727)
  * Fix: cibconfig: Complete promotable=true and interlave=true for Promoted/Unpromoted resource (bsc#1205522)
  * Fix: corosync: show corosync ring status if has fault (bsc#1205615)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1674475200">- Update to version 4.4.1+20230117.fb8b3c2b:
  * Dev: healthcheck: allow using non-root sudoer for remote access (jsc#PED-290)
  * Dev: bootstrap: implement swapping hacluster's ssh key using non-root sudoer remote access (jsc#PED-290)
  * Dev: utils: Check current user's privilege and give hints to user (jsc#PED-290)
  * Feature: replace root by a custom user with root privileges (jsc#PED-290)</changelog>
  <changelog author="XLiang@suse.com" date="1676635200">- Update to version 4.4.1+20230217.7fe11a5c:
  * Dev: report: Enable crm report for sudoer user
  * Dev: bootstrap: allow the cluster to operate with ssh session under non-root sudoer (jsc#PED-290)
  * Dev: utils: Add sudo for the commands in user hints
  * Fix: hawk fails to parse the slash (bsc#1206217)
  * Fix: extra logs while configuring passwordless (bsc#1207720)</changelog>
  <changelog author="XLiang@suse.com" date="1677240000">- Update to version 4.4.1+20230224.498677ab:
  * Dev: upgradeutil: do upgrade silently (bsc#1208327, bsc#1206183)
  * Fix: bootstrap: `crm cluster join ssh` raises TypeError (bsc#1208327)
  * Dev: utils: Change the way to get pacemaker's version (bsc#1208216)</changelog>
  <changelog author="XLiang@suse.com" date="1677844800">- Update to version 4.4.1+20230302.2b5310b9:
  * Fix: qdevice: Unable to setup qdevice under non-root user (bsc#1208770)</changelog>
  <changelog author="XLiang@suse.com" date="1678449600">- Update to version 4.5.0+20230309.a4c4192d:
  * Dev: version: Bump crmsh version to 4.5.0
  * Fix: report: Fix crm report issue under non-root user
  * Fix: log: Redirect debug messages into stderr (bsc#1208991)</changelog>
  <changelog author="XLiang@suse.com" date="1680177600">- Update to version 4.5.0+20230329.6d95249b:
  * Fix: utils: qdevice initialization should user_pair_for_ssh() to get appreciated users
  * Fix: crm report: sustain if there are offline nodes (bsc#1209480)
  * Fix: validate ssh session when the users is determined by guessing (bsc#1209193)
  * Fix: parallax: Use 'sudo bash -c' when executing commands via sudoer (bsc#1209192)</changelog>
  <changelog author="XLiang@suse.com" date="1682683200">- Update to version 4.5.0+20230427.11d11104:
  * Fix: bootstrap: crm cluster join default behavior change in ssh key handling (bsc#1210693)
  * Fix: help: Long time to load and parse crm.8.adoc (bsc#1210198)
  * Fix: cibconfig: use any existing rsc_defaults set rather than create another one (bsc#1210614)
  * Fix: lock: Join node failed to wait init node finished (bsc#1210332)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1683806400">- Update to version 4.5.0+20230510.847a251:
  * Fix: bootstrap: `init --qnetd-hostname` fails when username is not specified (bsc#1211200)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1688731200">- Update to version 4.5.0+20230705.ea8c76f:
  * Fix: ui_context: wait4dc should assume a subcommand completes successfully if no exceptions are raised (bsc#1212992)
  * Fix: upgradeutil: do not tried to upgrade when the cluster is partially set up (bsc#1211817)
  * Fix: bootstrap: fix the validation of option -N and -c (bsc#1212436)
  * Fix: geo_cluster: the behavior of choosing a default user in geo_join/geo_init_arbitrator is different with `cluster join` (bsc#1211817)
  * Fix: utils: do not use sudoer user to create ssh session unless it is specified explicitly (bsc#1211817)
  * medium: ui_node: fix cib rollback race on node standby
  * Dev: ui_cluster: Use 'CustomAppendAction' instead of 'append' argparse action
  * Dev: bootstrap: Configure ssh key when fetch geo config (bsc#1210709)
  * Dev: cmd_status: Use --output-as option instead of deprecated --as-html and --as-xml options
  * Dev: cmd_status: Append 'with quorum' and 'WITHOUT quorum' to display keyword list
  * Fix: bootstrap: failed to save username for localhost when initializing a cluster with a qnet server
  * Fix: utils: fix `cluster diff --checksum` (bsc#1210709)
  * Dev: geo: implement non-root support for geo_fetch_config() (bsc#1210709)
  * Fix: bootstrap: failed to join when the cluster is initialized with skip_csync2 (bsc#1210709)
  * Dev: prun: implement timeout (bsc#1210709)
  * Dev: prun: add an concurrency limiter (bsc#1210709)
  * Dev: scripts: implement non-root support with crmsh.prun (bsc#1210709)
  * Dev: implement non-root support for crm_pssh with crmsh.prun (bsc#1210709)
  * Dev: refine non-root sudoer support for crmsh.parallax (bsc#1210709)</changelog>
  <changelog author="nicholas.yang@suse.com" date="1690545600">- Update to version 4.5.0+20230725.5d35bb6:
  * Fix: upgradeutil: support the change of path of upgrade_seq in crmsh-4.5 (bsc#1213050)</changelog>
</package>
<package pkgid="3b5c7c78584e84ba835cbfc04dfc2f054f161b5221fa253650d6854c8182b3af" name="cross-aarch64-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dad47d104c5d0221eecd1e9e30ac0cf5fb19416005fe2966be97df16cbb65941" name="cross-aarch64-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f6eec5f75e6d3f9ebd6d4c376efa2bfc01d4f67eae2cbe50af8fc5f793e11b69" name="cross-aarch64-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="384dbeaf50eb712d71a828c3697e229fdb8dac897588f55390b5dccfbd6fdc45" name="cross-aarch64-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="41f39e14523d6efb62efc1c525e1741c8c239f799b4e07f218c7215bfa09451f" name="cross-aarch64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="17e1fd130467c45d1181b61dfd04999660032e4c3d0ddcc26b6401cf956722e8" name="cross-arm-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c642b876c3884221210c19bb6ae11f9d09114e271fa4069b86f55c0d777150c9" name="cross-arm-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="251da6d1b3f0d6ddc63f3b1c54b36f00aaff17622f5a17afd8ea815db12ff596" name="cross-arm-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a358724ef4c80599d67c035f986e3a1077e3036d9c3188271ee420df0068d35d" name="cross-arm-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a0880295f5c2a220e7b14610b4f96cc0577e8454ace512b6b7caaa133a2a3196" name="cross-arm-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cbc311e32026cfd43546e75cd059e864920216fbcabfec83faf8fb1b169d531f" name="cross-arm-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a3686c4afb149de985e056c319172c441e132fa54fd780eeb5c74e303aa50d8a" name="cross-arm-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17b8a017f623d599396b6d7bde3f93750f77cbcad5f8d4aaa3be9414110ab713" name="cross-arm-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e80cde23388978938fa624e0cad127b310afd24a7eb9ec8fcb060c01196676f5" name="cross-arm-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="509a2962a87ccfb1d24d3f01fde244e90cbe1ff9f68824915231a38ddd488b4f" name="cross-arm-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="13638e0ecfc8a36df9576e885749acd2361df2ec5037f5df37ece7ee8aea09f7" name="cross-arm-none-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d86fd50ca6aaa7f84b5f9215a63b854081e4a5a0c162d25e3d6d35476130d873" name="cross-arm-none-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="057c1bf4f5ba6e8904757f3fb568670e46d7b2fdbbc7e1ac1b5dac92296a6410" name="cross-arm-none-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="99e91aca0505d810bfb7c34e78b4c5a14128e7fc8cb3e4b499223e11b95b51ad" name="cross-arm-none-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3d6f0927cb7f4a7dea38d41079276ed318b4a2ac5b04ff704edf77f61f838a31" name="cross-arm-none-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7b22e8d4d0314ea32043851abbbc388194a98f60f30935238fd39c3568c89e9f" name="cross-avr-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e4e7179e25fc25ded7e243e34a83ab6c9e1cc645c1b849005331e2b5657a1aad" name="cross-avr-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="46774e2f960643c9fd8c5f84f8786b63d6558ae2867a2057d9dd2d7bca4eb2e6" name="cross-avr-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fd2ebdceb9b2868ddd27fe93a61468dd13b781b75ce86b02d4fceb501c68840b" name="cross-avr-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3f446dd68a587e7237330cf7425ee53519eae0a2b9c55f0f75a1a6c8fb282829" name="cross-avr-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a15a6762335c067e34a900ce83014e90c74da5207bcadd92d180283b7f526dde" name="cross-epiphany-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c60d508fd54e954a5ea6e1d5624f822f6faa8affc228f3f594a9f677cd058509" name="cross-epiphany-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="847ed1c4d697e3683b51a4af32123b097cdb72678012a80cc132602c3f7b4084" name="cross-epiphany-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0d5e2b03b5aa21ba60b5326d5ea5d136f393dbbfc5c0720afc4dcc542f9cd693" name="cross-epiphany-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b3d20bec8821810039c6d61d9b00f531a1ed03905375ad84147bb985d1fe8519" name="cross-epiphany-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c3b0cd098ceb02c0f4de1f5107ce3a10a5b92f48ca490328003f08ee630deb8a" name="cross-hppa-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="50bf2df0f58c8ea7e7d3564d92079535f6e31cecc48f3ca8aaeae9384b96a845" name="cross-hppa-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="50d20b947ccc2b605d92bdcddd92769907866afe1a0c427d23285864080a292b" name="cross-hppa-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1671c4b7b29115acd39dbac89ae139cda8297dee59ed15903de12b6374607449" name="cross-hppa-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e53486c89abc7a9059f95a1ad34e708fbbfe2899faa356a30903a78244e698fe" name="cross-hppa-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b25e6d2bb89c08abb8c4ac6a0e5dd9da72465839b9db5117a02c85f14fb7b5ff" name="cross-hppa-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e900831a4ac64c0d676755b0ec7508e6e0ae098b058a691cc591d4aeedaf1f10" name="cross-hppa-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9b06b09ded6b5d9f123724086dfaf32510da63592001ce845424f31d0e71b2f2" name="cross-hppa-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ec669f8da518b745c2de5ddbf568819d446d9ed5265eaa739397b62ab4619e5c" name="cross-hppa-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e4de0a969adfa51963e137710843780d5e3e8b677a85b034a5e7b7f618941c9f" name="cross-hppa-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7f6094f21ee9aac953744acbe8db44a40b08737664ec3ea3e979bf5037179f24" name="cross-hppa-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8435878c68aaa864bd5534e86109acb0e80e7575821ce3851de835265661269f" name="cross-hppa-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f6fd1ce83d011307af4f2f3db840aa617bdce1075947896d66632e1eb739f7a9" name="cross-hppa-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5d8a74539672dfd29bf05a3dd052194422cf39d87a8c1c521742bb7a0e09c9fa" name="cross-hppa-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="643dbc4bc97068aa88599540c79c44c1afd3d7f4eaa03f400b0d0a21dc5312f1" name="cross-hppa-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="3f0a1e660e7606be6106bae4a60689a4e3a9b42c8630b7f8e190676fe8f30e71" name="cross-i386-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="87684da675d2eab19c7157499d780ac87aeb2fabd36799a18b32598b40e29990" name="cross-m68k-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="164999c666fead19267c804cafeed56435104c99d06a0e7478578e2f15f59a34" name="cross-m68k-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="30755206cfb26ee49cf199b828cb176cb822bdc5e95e97a161d1119a27116e6c" name="cross-m68k-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f35ae6fa1a2e899a1c430879652ee2876bdb2191cbe0c28ac8ffbf065d992ed8" name="cross-m68k-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="864153008e435c042c8e7027bf2dd7255b3ffe9961a9ebe186859cf58ec4f160" name="cross-m68k-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1290224f1577c59713706d7777d8856b13b4cb4327af4163168da5033d827370" name="cross-m68k-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4175007a767028f3d069b428fe8285b2d412c9717b473029de87a65f53344e71" name="cross-m68k-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="80eff8711220dddae3584c9c6bc4d8e6b2827720110f40ca4d37f3b83f15de38" name="cross-m68k-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e7eaf7a949d1d477fccf91c8ab68974af6c06a937bb66ea419a923c02c0057ab" name="cross-m68k-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="16172c987739e04132673964020f46fe61044f1959d0abda6ce6f2ea620388c2" name="cross-m68k-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="64273a9e44e716517bfbd3c76ced3f0e31293ffd0fdb0781395ee5ecc1fa7b9f" name="cross-mips-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="412b1347cbcaf47883951b9df042ca8671908bfd95aa9f274cca30253b3fbdbe" name="cross-mips-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7d0b2df64b42d29eda364711231569014dd59da82674206cc200669b16434567" name="cross-mips-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="23a3400d8324f1c7ecc0ad741db49fd13cb6718bfb45c62ffb18acdc2d6dbb97" name="cross-mips-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d8cb3ba3c30326fb51b4a8366b1bbbf4fff3632e20290c51239c4006aecf4a0a" name="cross-mips-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ae003cb5feaac135b08ec34fdfea315205a1a0db790872ed1aa4a3d2abc6213a" name="cross-mips-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0023fb0058511c65a4e00ff67fce3d9e9a85f91ce6ef86e91397f7ccecd86896" name="cross-mips-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2b62571ab8d57806bad09a6d888953d1546af22fda8d3e480fdec055aafad9d2" name="cross-mips-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ae6ee77e08dc5376adece2037e992a4d53db67154b0912263a4035f51cb499d9" name="cross-mips-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="920a328921a39239311cbc470aca098563a08ca5c1735122053d93c2ef8d6807" name="cross-mips-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="fa14165dfe0a0f85dd8b768e6aecdd1c0cd2619e59b5e7dc439aa4850bf0a72a" name="cross-nvptx-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f15b52a0bdbf2ee376aa72d4262d18675c81850bf1645ca080c3b0f47c9818be" name="cross-nvptx-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b234bd6f763ab32995a8e4c4d6cb27c25cd9dfde1520177742d7bea66150f9cb" name="cross-nvptx-newlib12-devel" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f5bb5744a676f35fca1334e65f38c64a2aba049656151bb1bd83564809cb1d5f" name="cross-ppc64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="45e2b30ed0ace682f9f84bf1b6f903676d6875305d592d24a1d56d6fe2ac901b" name="cross-ppc64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="69e8ee8fb1e853320835156872b68c16025200676dc3d87c66a8e01f00ccffa9" name="cross-ppc64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="20c15a38660887fecfad7a97261c0d15ed0e6c7ea9c8b80cf5ea1f967ac0aa0e" name="cross-ppc64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8ba121078adba2a19957d3e89856edd3ccb695a280c9078f97b7f706af17db4a" name="cross-ppc64-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5fcf90a1c2ecd576f752fa66011b6e85e6085afc657a335c0a68c2940648fa8b" name="cross-ppc64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f0c89b75397f69e1a94da19e8f392e4ecd9427f79276157123a2910891a25380" name="cross-ppc64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4b1b05777eb31f9c29313dc7a78c7389fbb480c1836087599a0b9cfc354c4454" name="cross-ppc64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b74f25890050a1694a158b1b537031bbd35fed6d35880e74354a87556f3c27be" name="cross-ppc64-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="70bf2e405615fc09954024eee44919696fb4e87864fc8165f4df13765d296b93" name="cross-ppc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="e1efa94f7938ac456136db1e03ee094b3752df912a7a083b5292e1a0fa449ce6" name="cross-ppc64le-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="934e22b069c77f7604d16d0044b413b1173b7e97a32c9252b7233e79dba5d80d" name="cross-ppc64le-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dd5d7384bc3e7e21a1c3b79c9a99dd5aefb3b54481ba4ef10d84640594b8d824" name="cross-ppc64le-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="55db0cc82c87e747f0d8edc837d443b73475ff7882f16966667d2a631531156b" name="cross-ppc64le-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ab6bc34b6bd23317f258ffd32d807f042957688f2f6867cbd6a74c3f4d23ec1c" name="cross-ppc64le-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e2508094e2ccd92d6d51c40af1305b9a12c63f8ea54342783349dc6aedcde7d9" name="cross-ppc64le-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="645e2ce02c6cf0491410d2adf04a65137b4242ce9d72f632669a7234bbe60b83" name="cross-ppc64le-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="041e2e5bcb66bfdda900be9937ab3e73a2165f0980953198880c4e811018a526" name="cross-ppc64le-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="a8e2274c4fdd8b6cba866a86639ac0a15d7125fd3d8340d70122e56e495004d8" name="cross-riscv64-elf-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1897eca7f3be406473b7738eb6675448bb6b322dd04c2f7009c269c9c6c75ed3" name="cross-riscv64-elf-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="74f1615bb020ab9936882c19afb08e489765127bb0bd6e43502b0062b9f99661" name="cross-riscv64-elf-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="89b10b58efbe82db6e12c7a3bad975ff1fa09b69f6565eacce0829e8fdf9be12" name="cross-riscv64-elf-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="171edf82184b5e5db1be9facb22eef3f0a52a0f6ce2acbb708e51e960d11d820" name="cross-riscv64-elf-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5ffb7af8f30c449e07d5090e1481c33a6d281e186466f8dd1b46bf6bfdbc17c3" name="cross-riscv64-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6985ab3ad15817b8212445809f701bf4b7336a7a28d2991e316f78fa47cb69d7" name="cross-riscv64-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="de0e606312c0ab2dffc2a557ee81cb777bb70997ccc2a5b9a71f4c8501faa8c3" name="cross-riscv64-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b65aecc12469489d461e31cd4e504b50637d50db251908681e544eb2759f4893" name="cross-riscv64-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="40847375547cf84471ebd4228847f454b611a458df0b4ac21c65d8cb3b2e9428" name="cross-riscv64-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3746f961577d9c660b8c8851a6ee69eb636a705bf710df5a4278442c4f97dd61" name="cross-riscv64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="1234f85ad1dadfe626d8980021eaf81f6655979b8aaa04a679e5d87d52b84e5f" name="cross-rx-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3ad7e1e36993e5aedf2bcc92d663df4ea9b4f895d52e652e06aea7937d0856f3" name="cross-rx-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cbd2c4e9c8963290a6e6f2fe624f9c031928a02abd607c89689f8f20ebdc28a0" name="cross-rx-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7f384447fdbdd74c3dcca94d755b23f47d66f08282ccfb91c642dcb7749223a1" name="cross-rx-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="13dbde5f43fa7d0a0fb5c31ad6b8dd1727cc61dbc522e075bccb6d7c86ff180c" name="cross-rx-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2eb77234e4be36864f103811ffcb16ca9cb3efaa607f7d542d9fcab093b00310" name="cross-s390x-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e884fd2958c4ff3b08f54ba04fe1eaefb8eac47be97b2834c6a03d738e9d3e7d" name="cross-s390x-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8b3bc3a3937b8d72c54b91d43bbcd61e83f33e843be9a498855ea7b072e70d9b" name="cross-s390x-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="82aceabc870e3ff9ef2b5afb85af5073ba8fbb98b0e3ff78491c6ac2f6c08d9b" name="cross-s390x-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e37a24b27467eaf86010f68d0a124d4b1468a03a46fae03e56d0e963c9ce42b7" name="cross-s390x-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="344069a967be03946c5cf78364219734868bbd9400a1dfb7da4fb60ec4e3701f" name="cross-s390x-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b9d2bd0671f7a1b2c338b5a2f286609e304538483acd3876a1b491c7427cad94" name="cross-s390x-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0f6f213e7c53ec7dc668b083fba0826c0228edbe8c774ff451dad03ecd8846dd" name="cross-s390x-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="b8885a36dbc1125f0b51b7a4bc402248a54c0bc41d702e5803026cdad3585358" name="cross-sparc-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d3a1688b9cfee8cdb277f2e7ac657c96cf0a41950668434005b153890372e003" name="cross-sparc-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1870c8e13f1174475e746d57d9b2ac1baec4d37ae572641a023e3bedfc78e015" name="cross-sparc-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="74d0c07ef5ac4db2cb2702921fd14c3899291a117ca313fd7351c28ceb51b3bb" name="cross-sparc-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7a103adba1aa3f4f869a8898033d245bbd959de0c88db929a9a387ef1be6bdf7" name="cross-sparc-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2dfc9619498fc2a876722f001fbbda55b0d06653a0d215925b73c384af945b38" name="cross-sparc-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="591d1db4e824c899f0b9e8cb5c809d707a7ad8f4d1120905d14380df06c673df" name="cross-sparc64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f2c401d450b79283818bc0008bf9634b563492eeefddc8b43ab46a7a9c0b5972" name="cross-sparc64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="16b26ad67f70f6586952cae0b3c6eb472984ab6dd9053947a912f7c6bda76f12" name="cross-sparc64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fd6b3ff3d05586c5098c501e80cf3734e44c798ab9c9d604eedfb0bf5a7be9d3" name="cross-sparc64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d43dbd23416b2f66c05176f5ca2d6693abd3d37bf1a9d959648bef1bda62e70e" name="cross-sparc64-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4a1808b0c92b73613f3fc9fe9e8a7d6c6da5e43e322b95c63f5e3795cf5b1a6e" name="cross-sparc64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="22c071f92170770c27835a24b46142ad231c9bcf51291ece1c7b109f8fd458a3" name="cross-sparc64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="af1deefa09f45a461a86d517999573c5be9bdd928804fa2a847be9887d09bcd1" name="cross-sparc64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d3d015df7e596c4fda2acd3b8463b435fbc02ac2c5eaee0500c006aaca64966" name="cross-sparc64-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9c0bab892f9a28a647999be6f0babcbdef7b0f205b51f883cbbb88068152a166" name="cross-sparc64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="78b441bee00482474d1222fc76ba67d48f3b54321670021ce7fd715c9f105d9e" name="cross-sparcv9-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2eff1351730b008cbcea99c1a43f6f63938ae4849e3d5e7838c452d3277660ff" name="cross-sparcv9-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e1c7f00bd1d7015c81895ddd1e0598cd5825e695f316aa12925cfb096f3eb282" name="cross-sparcv9-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7e9e4c3257317132f215c1734a93f1d69809144f9fb082cc25e0eb96cdd72e04" name="cross-sparcv9-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e15be1c02d1b4cd0b6bd81ae7d7b093df519a87e8e3a4aacfe39fcb912d255c5" name="cross-x86_64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d381babf892677f0f01ef0ad4ae3d36550a5d5b09111e9393ddc8f4828bb24d" name="cross-x86_64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bfdb0459209e5c04ca3eb0b5f4c4a30f6edb8cdd8d5eec38c31bac272eb12aad" name="cross-x86_64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="95ad5ba91f38cbf44518f24206460042e9f031e45771735b09399702809f98f9" name="cross-x86_64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8976beeed4e12991c1a1fc345dc67ac993f7c5e9ca618675aff9e3943637e8ca" name="cross-x86_64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="48e131bdfbca7d4dbb158dc81024044e7655638160189d55211245ff1cf53c7f" name="cross-x86_64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3442616e121cacef4e41997127869fc4043c5e364f645f463ac8728650e704c5" name="cross-x86_64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5b3ea269cb6be4f511cde6c871c39d8c11d77d45614d8e299080578e334e088a" name="cross-x86_64-linux-glibc-devel" arch="noarch">
  <version epoch="0" ver="5.14" rel="150500.12.3.2"/>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="mbrugger@suse.com" date="1676376000">- Add asm/uvdevice.h to the package (bsc#1207886)
  + drivers-s390-char-Add-Ultravisor-io-device</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="ca332ab2a918b9fea966e5e4e1d24a973ea115fb1f38a9dbb49de0a43eb45295" name="ctdb" arch="aarch64">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="8df394165185e2a4f0f3346974ba2036b5409a2371b0190708a255161bdbace2" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="7a9f2c5e6faaaba5635b6a723f6ad69e0e30d4c50e7abede70073f671398337a" name="ctdb" arch="s390x">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="031f2db23951bcc208d8c29c6a6e569b378b2745846e06d028ec018591f08724" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="7512e09f087b358a9464c561c93c1dfbc4d2ff2b47ab41dd96e26987a7f63eb3" name="ctdb-pcp-pmda" arch="aarch64">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="2fd61c566183331906f858cc9649162a5770ce7f80a771eb811985c680cb17ab" name="ctdb-pcp-pmda" arch="ppc64le">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="884d7ee9e28ee177ca7dad30c8250989f3553c83efd0e16c4bc9647533cd1bcb" name="ctdb-pcp-pmda" arch="s390x">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="718fe2baa2a59590c32bdceb7d52a84ee8074794c9cfd82a7166f86a1a3d48ab" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.17.9+git.367.dae41ffdd1f" rel="150500.3.5.1"/>
  <changelog author="scabrero@suse.de" date="1657281600">- Update to 4.15.8
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * Setting fruit:resource = stream in vfs_fruit causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work; (bso#15076);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * netgroups support removed; (bso#15087); (bsc#1199247);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674); (bsc#1199734);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * Compile error in source3/utils/regedit_hexedit.c; (bso#15091);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);</changelog>
  <changelog author="nopower@suse.com" date="1657800000">- CVE-2022-32746: samba: Use-after-free occurring in database
  audit logging; (bso#15009); (bso#15096); (bsc#1201490).
- CVE-2022-32745: samba: ldb: AD users can crash the server
  process with an LDAP add or modify request; (bso#15008);
  (bso#15096); (bsc#1201492).
- CVE-2022-2031: samba, ldb: AD users can bypass certain
  restrictions associated with changing passwords; (bso#15047);
  (bsc#1201495);
- CVE-2022-32742:SMB1 code does not correct verify SMB1write,
  SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
  (bsc#1201496).
- CVE-2022-32744: samba, ldb: AD users can forge password change
  requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1660737600">- Fix Use after free when iterating
  smbd_server_connection-&gt;connections after tree disconnect
  failure; (bso#15128); (bsc#1200102).</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- CVE-2022-1615: Do not ignore errors in random number generation;
  (bso#15103); (bsc#1202976);
- CVE-2022-32743: Implement validated dnsHostName write rights;
  (bso#14833); (bsc#1202803);</changelog>
  <changelog author="nopower@suse.com" date="1664452800">- Update to 4.15.10
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128);
    (bsc#1200102).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Spotlight RPC service returns wrong response when Spotlight
    is disabled on a share; (bso#15086).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * rpcclient can crash using setuserinfo(2); (bso#15124).
  * Samba fails to build with glibc 2.36 caused by including
    &lt;sys/mount.h&gt; in libreplace; (bso#15132).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * samba-tool domain join segfault when joining a samba ad
    domain; (bso#15078).
- Update to 4.15.9
  * CVE-2022-32742:SMB1 code does not correct verify SMB1write,
    SMB1write_and_close, SMB1write_and_unlock lengths; (bso#15085);
    (bsc#1201496).
  * CVE-2022-32746: samba: Use-after-free occurring in database
    audit logging; (bso#15009); (bso#15096); (bsc#1201490).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32745: samba: ldb: AD users can crash the server
    process with an LDAP add or modify request; (bso#15008);
    (bso#15096); (bsc#1201492).
  * CVE-2022-2031: samba, ldb: AD users can bypass certain
    restrictions associated with changing passwords; (bso#15047);
    (bsc#1201495);
  * CVE-2022-32744: samba, ldb: AD users can forge password change
    requests for any user; (bso#15074); (bso#15047); (bsc#1201493).</changelog>
  <changelog author="nopower@suse.com" date="1668600000">- Update to 4.15.12
  * CVE-2022-42898: samba: heimdal: Samba buffer overflow
    vulnerabilities on 32-bit systems; (bso#15203); (bsc#1205126).
- Update to 4.15.11
  * Allow rebuild of Centos 8 images after move to vault for
    Samba 4.15; (bso#15193).
  * CVE-2022-3437: samba: Buffer overflow in Heimdal unwrap_des3();
    (bso#15134); (bsc#1204254)</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Introduce without-smb1-server spec flag; (bsc#1205104);
- Update to 4.17.3
  * CVE-2022-42898: Samba buffer overflow vulnerabilities on 32-bit
    systems; (bsc#1205126); (bso#15203);
- Replace obsolete python-gpgme with python-gpg
  * Upstream replaced it in v4.9.5 -- bso#13728
- Update to 4.17.2
  * CVE-2022-3592 [SECURITY] samba: Wide links protection broken;
    (bso#15207); (bsc#1204499).
  * CVE-2022-3437 [SECURITY] samba: Buffer overflow in Heimdal
    unwrap_des3();(bso#15134); (bsc#1204254).
- Update to 4.17.1
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * smbXsrv_connection_shutdown_send result leaked; (bso#15174).
  * Flush on a named stream never completes; (bso#15182).
  * Permission denied calling SMBC_getatr when file not exists;
    (bso#15195).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * pytest: add file removal helpers for TestCaseInTempDir;
    (bso#15191).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * Samba 4.5 sometimes cannot be upgraded to Samba 4.6 or later
    over DRS: WERROR_DS_DRA_MISSING_PARENT due to faulty GET_ANC;
    (bso#15189).
  * Flush on a named stream never completes; (bso#15182).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
  * multi-channel socket passing may hit a race if one of the
    involved processes already existed; (bso#15200).
  * memory leak on temporary of struct imessaging_post_state and
    struct tevent_immediate on struct imessaging_context (in
    rpcd_spoolss and maybe others); (bso#15201).
  * Since popt1.19 various use after free errors using result of
    poptGetArg are now exposed; (bso#15205); (boo#1204279).
  * Remove special case for O_CREAT in SMB_VFS_OPENAT from
    vfs_glusterfs; (bso#15192).
  * GETPWSID in memory cache grows indefinetly with each NTLM
    auth; (bso#15169).
  * CVE-2021-20251 [SECURITY] Bad password count not incremented
    atomically; (bso#14611).
- Install a systemd drop-in file for named service to allow
  read/write access to the DLZ directory; (bsc#1201689);
- Fix use after free errors resulting from using return of
  poptGetArg exposed since popt-1.19; (boo#1204279); (bso#15205).
- s3: smbd: Fix memory leak in
  smbd_server_connection_terminate_done(); (bso#15174).
- Disable SMB1 for tumbleweed builds.
- Update to 4.17.0
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Missing SMB2-GETINFO access checks from MS-SMB2 3.3.5.20.1;
    (bso#15153).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * assert failed: !is_named_stream(smb_fname)") at
    ../../lib/util/fault.c:197; (bso#15161).
  * Cross-node multi-channel reconnects result in SMB2 Negotiate
    returning NT_STATUS_NOT_SUPPORTED; (bso#15159).
  * winbind at info level debug can coredump when processing
    wb_lookupusergroups; (bso#15160).
  * Make use of glfs_*at() API calls in vfs_glusterfs;
    (bso#15157).
  * Possible use after free of connection_struct when iterating
    smbd_server_connection-&gt;connections; (bso#15128).
  * `net usershare add` fails with flag works with --long but
    fails with -l; (bso#15145).
  * acl_xattr VFS module may unintentionally use filesystem
    permissions instead of ACL from xattr; (bso#15126).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Missing READ_LEASE break could cause data corruption;
    (bso#15148).
  * libsamba-errors uses a wrong version number; (bso#15141).
  * SMB1 negotiation can fail to handle connection errors;
    (bso#15152).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * 4.17.rc1 still uses symlink-race prone unix_convert();
    (bso#15144).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Manpage for smbstatus json is missing; (bso#15147).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Performance regression on contended path based operations;
    (bso#15125).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
  * Fix issues found by coverity in smbstatus json code;
    (bso#15140).
  * Backport fileserver related changed to 4.17.0rc2;
    (bso#15146).
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Update to 4.16.4
  * CVE-2022-2031: Samba AD users can bypass certain restrictions
    associated with changing passwords; (bsc#1201495); (bso#15047);
  * CVE-2022-32744: Samba AD users can forge password change
    requests for any user; (bsc#1201493); (bso#15074);
  * CVE-2022-32745: Samba AD users can crash the server process
    with an LDAP add or modify request; (bsc#1201492); (bso#15008);
  * CVE-2022-32746: Samba AD users can induce a use-after-free in
    the server process with an LDAP add or modify request;
    (bsc#1201490); (bso#15009);
  * CVE-2022-32742: Server memory information leak via SMB1;
    (bsc#1201496); (bso#15085);
- Update to 4.16.3
  * Using vfs_streams_xattr and deleting a file causes a panic;
    (bso#15099);
  * Add support for bind 9.18; (bso#14986);
  * logging dsdb audit to specific files does not work;
    (bso#15076);
  * Problem when winbind renews Kerberos; (bso#14979);
    (bsc#1196224);
  * Samba with new lorikeet-heimdal fails to build on gcc 12.1 in
    developer mode; (bso#15095);
  * Crash in streams_xattr because fsp-&gt;base_fsp-&gt;fsp_name is
    NULL; (bso#15105);
  * Crash in rpcd_classic - NULL pointer deference in
    mangle_is_mangled(); (bso#15118);
  * smbclient commands del &amp; deltree fail with
    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);
    (bsc#1200556);
  * Fix check for chown when processing NFSv4 ACL; (bso#15120);
  * The pcap background queue process should not be stopped;
    (bso#15082);
  * testparm: Fix typo in idmap rangesize check; (bso#15097);
  * net ads info returns LDAP server and LDAP server name as
    null; (bso#15106);
  * ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;
    (bso#15108);
  * CTDB child process logging does not work as expected;
    (bso#15090);
- Update spec file to fix the optional Heimdal DC build
- Fix external trusts with MIT Kerberos 1.20
- Add missing samba-client requirement to samba-winbind package;
  (bsc#1198255);
- Move pdb backends from package samba-libs to package
  samba-client-libs and remove samba-libs requirement from
  samba-winbind; (bsc#1200964); (bsc#1198255);
- Add sysuser-shadow requirement for packages using
  systemd-sysusers
- Use the canonical realm name to refresh the Kerberos tickets;
  (bsc#1196224); (bso#14979);
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Update to 4.16.2
  * Use pathref fd instead of io fd in vfs_default_durable_cookie;
    (bso#15042);
  * vfs_gpfs with vfs_shadowcopy2 fail to restore file if original
    file had been deleted; (bso#15069);
  * Reintroduce netgroups support; (bso#15087);
  * net ads info shows LDAP Server: 0.0.0.0 depending on contacted
    server; (bso#14674);
  * Update from 4.15  to 4.16 breaks discovery of [homes] on
    standalone server from Win and IOS; (bso#15062);
  * waf produces incorrect names for python extensions with Python
    3.11; (bso#15071);
  * smbclient -E doesn't work as advertised; (bso#15075);
  * The samba background daemon doesn't refresh the printcap cache
    on startup; (bso#15081);
  * Out-by-4 error in smbd read reply max_send clamp; (bso#14443);
- Fix samba4.blackbox.net_ads_dns_async test with bind9 &gt;= 9.17.7
- Support building with MIT Kerberos 1.20
- Bronze bit and S4U support with MIT Kerberos 1.20 for Samba AD DC;
  (CVE-2020-17049);
- Resource Based Constrained Delegation (RBCD) for Samba AD DC
- Support building with gcc 12.1
- Use requires_eq macro to require the libldb2 version available at
  samba-dsdb-modules build time; (bsc#1199362);
- Update to 4.16.1
  * Share and server swapped in smbget password prompt; (bso#14831);
  * Durable handles won't reconnect if the leased file is written to;
    (bso#15022);
  * rmdir silently fails if directory contains unreadable files and
    hide unreadable is yes; (bso#15023);
  * SMB2_CLOSE_FLAGS_FULL_INFORMATION fails to return information
    on renamed file handle; (bso#15038);
  * Need to describe --builtin-libraries= better (compare with
  - -bundled-libraries); (bso#8731);
  * vfs_shadow_copy2 breaks "smbd async dosmode" sync fallback;
    (bso#14957);
  * shadow_copy2 fails listing snapshotted dirs with shadow:fixinodes;
    (bso#15035);
  * PAM Kerberos authentication incorrectly fails with a clock skew
    error; (bso#15046);
  * Username map - samba erroneously applies unix group memberships
    to user account entries; (bso#15041);
  * KVNO off by 100000; (bso#14951);
  * Uninitialized litemask in variable in vfs_gpfs module; (bso#15027);
  * vfs_gpfs recalls=no option prevents listing files; (bso#15055);
  * smbd doesn't handle UPNs for looking up names; (bso#15054);
- Update update-apparmor-samba-profile script, replace
  non-printable delimiter with more human readable separator as
  sed can accept separators that can appear in the input data.
- Fix update-apparmor-samba-profile script, sed doesn't like
  multibyte separators; (bsc#1198309).
- Update to 4.16.0
  * New samba-dcerpcd binary to provide DCERPC in the member server
    setup
  * Certificate Auto Enrollment
  * Ability to add ports to dns forwarder addresses in internal DNS
    backend
  * No longer using Linux mandatory locks for sharemodes
  * SMB1 protocol has been deprecated, particularly older dialects
  * SMB1 protocol SMBCopy command removed
  * SMB1 server-side wildcard expansion removed
- Add python3-dnspython to samba-ad-dc recommens; (bsc#1187101);
- Use systemd-sysusers to create system users; (bsc#1182847);</changelog>
  <changelog author="scabrero@suse.de" date="1671105600">- Update to 4.17.4
  * CVE-2022-44640 Upstream Heimdal free of user-controlled
    pointer in FAST; (bsc#14929);
  * CVE-2021-20251 Bad password count not incremented atomically;
    (bsc#14611);
  * CVE-2022-42898 krb5_pac_parse() buffer parsing vulnerability;
    (bsc#15203);
  * CVE-2022-37966 rc4-hmac Kerberos session keys issued to
    modern servers; (bso#15237);
  * CVE-2022-37967 Kerberos constrained delegation ticket forgery
    possible against Samba AD DC; (bso#15231);
  * CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak
    and should be avoided; (bso#15240);
  * pam_winbind uses time_t and pointers assuming they are of the
    same size; (bso#15224);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * filter-subunit is inefficient with large numbers of
    knownfails; (bso#15258);
  * smbd allows setting FILE_ATTRIBUTE_TEMPORARY on directories;
    (bso#15252);
  * The KDC logic arround msDs-supportedEncryptionTypes differs
    from Windows; (bso#13135);
  * libnet: change_password() doesn't work with
    dcerpc_samr_ChangePasswordUser4(); (bso#15206);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
  * Memory leak in snprintf replacement functions; (bso#15230);
  * RODC doesn't reset badPwdCount reliable via an RWDC
    (CVE-2021-20251 regression); (bso#15253);
  * Prevent EBADF errors with vfs_glusterfs; (bso#15198);
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243);
  * Stack smashing in net offlinejoin requestodj; (bso#15257);
  * Windows 11 22H2 and Samba-AD 4.15 Kerberos login issue;
    (bso#15197);
  * Heimdal session key selection in AS-REQ examines wrong entry;
    (bso#15219);
- Remove deprecated if-{down,up} scripts; (bsc#1206444);
- Adjust the systemd drop-in file for named service; (bsc#1201689);
  * Paths are additive so do not repeat paths from named.service
  * Prefix the samba DLZ directory with "-" to ignore this path
    if it does not exists</changelog>
  <changelog author="nopower@suse.com" date="1671624000">- Change with_dc default to 0 (for non TW builds), ADDC feature is
  deprecated and will no longer be included in &gt;= SLE15-SP5;
  (jsc#PED-1122).</changelog>
  <changelog author="nopower@suse.com" date="1673524800">- Clean up logic for PAM migration settings in spec file.</changelog>
  <changelog author="nopower@suse.com" date="1674475200">- libdsdb-module-samba4 should be packaged as part of samba-libs and
  not samba-ad-dc-libs. Additionally no need for it to be
  removed conditionally.</changelog>
  <changelog author="nopower@suse.com" date="1674475201">- Remove non functioning ifup/ifdown samba-winbindd scripts;
  (bsc#1207414).</changelog>
  <changelog author="nopower@suse.com" date="1678363200">- Make samba-libs conflict with old samba-ad-dc-libs package
  to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1679745600">- Make (32bit) samba-libs conflict with old samba-ad-dc-libs
  package to satisfy installcheck.</changelog>
  <changelog author="nopower@suse.com" date="1681300800">- Update to 4.17.7
  * CVE-2023-0922: Samba AD DC admin tool samba-tool sends passwords
    in cleartext; (bso#15315); (bsc#1209481).
  * CVE-2023-0225: Samba AD DC "dnsHostname" attribute can be
    deleted by unprivileged authenticated users; (bso#15276);
    (bsc#1209483).
  * CVE-2023-0614: samba: Access controlled AD LDAP attributes can
    be discovered; (bso#15270); (bsc#1209485).
  * large_ldap test is inefficient; (bso#15332).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
- Update to 4.17.6
  * streams_xattr is creating unexpected locks on folders;
    (bso#15314).
  * Use of the Azure AD Connect cloud sync tool is now supported
    for password hash synchronisation, allowing Samba AD Domains
    to synchronise passwords with this popular cloud environment;
    (bso#10635).
  * Spotlight doesn't work with latest macOS Ventura;
    (bso#15299).
  * New samba-dcerpc architecture does not scale gracefully;
    (bso#15310).
  * vfs_ceph incorrectly uses fsp_get_io_fd() instead of
    fsp_get_pathref_fd() in close and fstat; (bso#15307).
  * With clustering enabled samba-bgqd can core dump due to use
    after free; (bso#15293).
  * fd_load() function implicitly closes the fd where it should
    not; (bso#15311).
- Update to 4.17.5
  * smbc_getxattr() return value is incorrect; (bso#14808).
  * Compound SMB2 FLUSH+CLOSE requests from MacOSX are not
    handled correctly; (bso#15172).
  * synthetic_pathref AFP_AfpInfo failed errors; (bso#15210).
  * samba-tool gpo listall fails IPv6 only - finddcs() fails to
    find DC when there is only an AAAA record for the DC in DNS;
    (bso#15226).
  * smbd crashes if an FSCTL request is done on a stream handle;
    (bso#15236).
  * DFS links don't work anymore on Mac clients since 4.17;
    (bso#15277).
  * vfs_virusfilter segfault on access, directory edgecase
    (accessing NULL value); (bso#15283).
  * CVE-2022-38023 [SECURITY] Samba should refuse RC4 (aka md5)
    based SChannel on NETLOGON (additional changes); (bso#15240).
  * %U for include directive doesn't work for share listing
    (netshareenum); (bso#15243).
  * Shares missing from netshareenum response in samba 4.17.4;
    (bso#15266).
  * ctdb: use-after-free in run_proc; (bso#15269).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * auth3_generate_session_info_pac leaks wbcAuthUserInfo;
    (bso#15286).
  * smbclient segfaults with use after free on an optimized
    build; (bso#15268).
  * smbstatus leaking files in msg.sock and msg.lock;
    (bso#15282).
  * Leak in wbcCtxPingDc2; (bso#15164).
  * Access based share enum does not work in Samba 4.16+;
    (bso#15265).
  * Crash during share enumeration; (bso#15267).
  * rep_listxattr on FreeBSD does not properly check for reads
    off end of returned buffer; (bso#15271).
  * Avoid relying on C89 features in a few places; (bso#15281).</changelog>
  <changelog author="nopower@suse.com" date="1686830400">- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with &gt;1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).</changelog>
  <changelog author="nopower@suse.com" date="1688644800">- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).</changelog>
  <changelog author="nopower@suse.com" date="1689249600">- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).</changelog>
  <changelog author="nopower@suse.com" date="1689595200">- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).</changelog>
</package>
<package pkgid="eb4dee617c1fa8a1a143786764afb3ecc1d6cc93eab9be2c78f6d25eeed2039c" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="ac106bd69a98423a512051bcb2e5a038642ee99a4145fac0b3e8883d9e4ec292" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="9b2e448faedf76d4ba65cc47a8bcbf9ce096e166e141d04f77d710892de5eafa" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="f3c76c70c1fc36fab856e51e75424391a3eea0cc6b2cd6442ab016c22af2663c" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="53cb2dee2284d5023831ef131764982812ca48106fab1ef941b4a485f5e395c9" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="a8375c0c9f7a21320b12bec4e4e1c7eb4bbba723687699b682797cb93cccc8aa" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="02c02a245539a10c280f528079546e0a8d64ec8d5404268a5d33122119e70f58" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0dcf78b9b46af921aa4a6216cbadecee491e7563161d0cf8db334d18e8f0629c" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f5eb3c9b5bd854918010ac04be2fadd97ef7e08f70cb677b5a8f754d8d96f073" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="088a00f86d5f7e821cf5ba57bbc1699c110f205e6f659a4bb919da3b2f10c713" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="1233ea062e160a907a3c00a109dd5694c57b3ad6d3a5163449e931acea369f54" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="5b9b22010da7993b1eeb9c9e56da39c7c6e5ac2a4b6bb9096426428699ffe1b6" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="521737c71b5e5b903ab55c877a5e961d260774e63bbaf457f0bd393a0d0d0bc5" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="84ff912a3d2e3d6da8ca0cf3bd0d1be3f152f62ec48c28204bc0d41322d9e6e0" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="6475da3915f2aa463c99a4652b3cba4abbc8f8cb531e832fcd5caef549edfc66" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0b108ffa88f8022661098c4af09bf967d7184a7e35175fb255b8dc1c668c2163" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="324623452204aed538c3860a9ef8dbe1d2dca7936490e3353f53d88d3477ced3" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0f4af683acfd5718cac756c627a91970ce680a15d2b34df12ea181e9f8889dbd" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="69ac06682a00fc337756db82098c42650398dbd95b9aaf7ddbad7799e630bfd1" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="7464330e5bbf1202d38b967a2d4164d18951416b7754a7269e92ff83a25b7f4f" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="d9ed50be9bc669fda86875b763ad24c8b74d24064aab9883691855165c317efc" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="32026d0981feab396d4a236db6027d4fc4c83b74197d2e3368a007b7e71218dc" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="485f14f7ebd052e1d9c59fc7c245b0c5e080a99e0ca74f5403bf0992054522a4" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f975ac8bb98ffeb6f1eebb55f3ff43ad95b69afd1a113817c1285b5a9751bacb" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="68d5fd6c2812972f8fffee22e8cbff0c9e711935943a9cd736fae54ad60673cf" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="2ba6f6eab833ac17f012a6b8596f03ceb222dc9967114c96c612d1cd7fe2a04a" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="a4c1d64ba8890e0880973eb67a8707ebfb4a05a5f98c60d339057521fec6bf29" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="47caace35f5d90a41097a5211cbe2270f67da63571ccfc62135f0c3494ef63d8" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="7d4b782452cd3433c901edacdc8e74eded9151b20cd8c3e7379841f7967477fa" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3ae136d5e9dba3fd1d3f8c518012e4a76f70e2dd43026c1682c5b1c488ff2c1e" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="17deb2b7e9ba4529c9d5519fb46b313e0d252e11509d05fb52fe337adfa07aa7" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="1d593c9c9d7a43a6aedb5d4dc9a0c95926034c9efe12f8eb5187ef147b97186e" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ca1afeb8efc267e1020ee6d7c12d63deb9bc4a64d16a7eeac8718cf01f0927c4" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="5d869d9ce2edc934ceab017131045952f5bc0e2fdb1a070704acfe6a0ac1c500" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f92f70c92b872e8bd13b1fccad06a8a63ab845fb56d3d931e5f4b78073e4e095" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="c785d6d0f2383930efc9f39166c0bd7100a6b360d47c33ac03ff1708b952d6a6" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="24987b6e06ab5c72b1a3a6d4680b5ddff6def9083b4c2b9a0278f9ed4a9e3a47" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3d3e6712b39bd3545facd46a356a73e89a09ed3a644e131c2a120a1363d4c1fb" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="36c087a25bd3c72415b64a2f41fa99cccf16cc242730529b4909710ded73d64f" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="10be98ebe1ceac2795e6b3ec07a1efac1a5b24ba9b1d133f2581b9af159643f9" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="c2d28fd1e8f98418fe159a0de1996f615bdf069b56f63b6a0118e29a0bc18b5e" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="c2fe0995102fe8173b2aa410065dd67ef22b874396f34eff5aea871d6c3f6af4" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ae09d6a4c7d6c2623612bc5e64d0eed254a6235dc1dfb322443369af414c69c6" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="0215050f20ce00c2dd2a98cb272ca3337bf04a7e3776e0b22a90d97263a55811" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="695c5c973344d154146001b5f4a15fc705d471571c33217800fe3ed6cd88beac" name="cups-filters" arch="aarch64">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="aed2b72b8e9abc09ed4577f3d9acd0cd29ba0489c3e2681f67ed40f73d2bf07b" name="cups-filters" arch="ppc64le">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="d0a5961b48387102a2ecd022135d1f579450bdd6cd25307e86cec24ebf242e80" name="cups-filters" arch="s390x">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="046cce65a5c5408d1f5468ec6e4a01cef23260b8e1a15a0dc34d5452d89949d0" name="cups-filters" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="c8643eacc247d6a14409d2e4afa7144320fd11fdb3fcf2325188a1cf4d74cc7c" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="c9c92a3f24112ba189f38436660595648ec8be36998176967fedb4750df868d6" name="cups-filters-devel" arch="aarch64">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="81816d301395de0c886df48311e16139c132d9c1c8cb180cfa85e647035bf335" name="cups-filters-devel" arch="ppc64le">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="b7b180b557df261307ec732d9e8662d5539053f9d6afa604c30200bd9e48dd2a" name="cups-filters-devel" arch="s390x">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="de7099cff0a5876a187791ddbaac118989d113e7deb1527208a2c0fee9fc02c4" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525262400">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
</package>
<package pkgid="9e9cf3056d28ac5495f1cb882badcbefe3fabb63f2a5473b345b2a724544cfff" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="f8a9fbb8e478a7939e6fd123eab9d3ac3be94b5d96d6a9f05053c614cb759c19" name="curl" arch="ppc64le">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="ce79e4f5d90cffa80512a461c85c389284797b6f97ea0ceda0a6e453a7d7f346" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="7898863fe05570841ec19ee3e1b3335e975fe6a312f6f1418e0d221b4a00af13" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="3a916d994cb241620c50f2c260fd977371ef8bb4467e0486d5f029debf705b2a" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="e61f0c750c4fe2ee96d3a7b1633583195649ed4931125bd6072a2df3c3380f60" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="c5229fd7df2db33c2ff4343b73382dd4aa1ce69e1e673f0ab12ff3a8511973c6" name="curl" arch="ppc64le">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="9f7e2eddf4af6da355526291587f23ee18130a50617b53ed641e159c4ebfa6bd" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="f517b25bd293c33fc2a5f413f43b1feaac5cddbc5f91d581ed09c5b69e6804e4" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="da0e11e8264d0058535682028147c9cea2c6f62c4410050735a8eb89ae6ce7da" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="df42ef35a85736d508012a50c1c2ab7006dd00856288a4ff13ca8fe110ead184" name="dav1d" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="79dfb72cd0a5119e9fc792a05ef2b30d2d416890b88502a2cd93f78acd1dc5a5" name="dav1d" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="8bf75a9b02c78dd0f802cae1d44ff4e122051f4c6404e02751150c701a1e568a" name="dav1d" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="d26c4657cd1306fd102065dbf79782eb99c5e00513be196ba3439cc71ec6e7fa" name="dav1d" arch="src">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="372169033280e97c07844587b76fe30bc7b345f56c58aa6cf0d17e68f7afb82f" name="dav1d" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="2cf91a840a1e450c22e995799277c1c058117e5bb9ca059b9aef5c7fbf917d78" name="dav1d-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="f38c69a3f4620e12904eb732aa5ecdef3c597172e39d499a22a2e73701a1a8ff" name="dav1d-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="afe5d237e83b4b406f2267568f03e578a4e76fa3e2d328b32cbd1d70573e9a89" name="dav1d-devel" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="082313c9a1aba61eeca72d74d7d1128bd48d70e80f1fc5f4cae337a0b9dbd7b6" name="dav1d-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="3487eb9fbe0059be4da6447fbe22da5a5edc721bd735b7d75ac1de432422e667" name="db48-doc" arch="noarch">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="fd733e7ded3955d4f9fa0d9ca38c0a44893eccb41f0e43423e71dc82d5eeaf2a" name="db48-utils" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="556446de3e8e644a6055236c93b28b2fbab02a1974fd7e4d6578c8b4e4655689" name="db48-utils" arch="ppc64le">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ff584c6818c34a6d7b6e25059f4a09056bc58f63f5186e6661853ba79b116df5" name="db48-utils" arch="s390x">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ac29c5974b27947a3719fdbf35be44d612a2c3b4a87df83b0a2c10e64f02ca86" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ad1292f56a736615966fe3397c19614b0a7b63698dc5e011f5aad9d992494b2d" name="dbus-1" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="2322ca91cb0c0ddafecd822f0d0bfc1a8e73b8c992ebb1c520ed4517f9c87b2e" name="dbus-1" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="fe6e44a2a6d7a6047b9a04b586c6b2ea1fe9b714debdf40ff1e10eb0cb01f72c" name="dbus-1" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="0cb21701418d395d26dc6126959c4d5ec1398971bf516d3a372f115cd03b270f" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="81eca7628d55103f672bdc6280fb3d4c2f8dd1e8e1897aa54fb5066bf4742eb3" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="234b219fd5e672b93181c291a777d544663487dbc8493dbc895d4f3f41b4d89c" name="dbus-1-devel" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="4ac79f92c2377135e1b7324e7c91b8fed7d4f8b310d897fe4d36c6b8045299fd" name="dbus-1-devel" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="9036e8c95978e3222c1f95cad94d15fdf9bada2653f889a11f87d11341c791cd" name="dbus-1-devel" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="adfd47df4cf51bf16fbc6f61bdaafafe217634e160baa98227663794d5e9ebff" name="dbus-1-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="9c76039d54ee5cf84974b68889d5e169c0a5787e285252d4246df33960e74b1f" name="dbus-1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="bcb6783224f114340848d0baf89688a33f150625928022c63b9518c7d82e387b" name="dbus-1-devel-doc" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="65cc29b118ac2e881fdd6f2f0e21bf421691e782090f0a71eb4c6cb733323b8a" name="dbus-1-x11" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="1ef5fb12cf88ae3ea1918748e75840558fb925308d3ba76b1826fd7073d43ca6" name="dbus-1-x11" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="84ef5bf577e2fb42a3ee0e4c848000265d015c1ce55a85cff864a16ed169e98f" name="dbus-1-x11" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="bf6d851c5b0896035a55bad81574220a9ec277c072b694c4fc445386528ea5fe" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="5e1da8f2dea5f0517bda6b62271b1a6e41e19a13ef544fd53d312c618b64fb23" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="e4cf5397077691ad33671b974ac384db9cf0eac037da4bde123f53c483816a5b" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="537f9ebe438d8224d26f4101833f453ef1b89aae93811672e65f689eca767214" name="device-mapper" arch="ppc64le">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="579fd6adc653994be57081fd39819acde7255dab631a91d3bc262603245c5ebd" name="device-mapper" arch="s390x">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="818698a4eeacfffdf9b1a0bc7c0a0264d343b463751dbde9cac18e2e2230efb1" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="932ed7cfb98ba2257e84c8137b38cdfe51e2beeb4c53fc760d5afe25e199fd79" name="device-mapper-devel" arch="aarch64">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="6a15afb4c044464cc976996e92f3172062b93e4991efe0388fa9cf6238a4915a" name="device-mapper-devel" arch="ppc64le">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="9bdee09d5451917201168424d5bddd2a4a36b73622f8853025bb4d62d1dfb4a4" name="device-mapper-devel" arch="s390x">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="0328c4d23616f64575998a5a3041094d138d1bc919aba6d2ab60bc4e3a3d2978" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="0c55f46e4751be8f4797c5ebd33d6cadda4f91510cf964b3ef7219e940602259" name="device-mapper-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.03.16_1.02.185" rel="150500.7.3.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
</package>
<package pkgid="5c9320ecb6e7966e585f31b95ab35a9ef5081d5d4f4f9397656d6b1e9f3c214f" name="distribution" arch="src">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="2d16d38bda5246f1a99f1a504a6f037da3f4c7040584eb08d1638b884911b1df" name="distribution-registry" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="a437113dcdd2f46974968da3bf4b9226db5793a775ded69d6d87eabaa8c8304e" name="distribution-registry" arch="ppc64le">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="d2bf9bed67980e7eff5d120bd4aeb77e379d32b638918a642356703d8a02facd" name="distribution-registry" arch="s390x">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="c7fe825c7e59969f83d8d4b831b25f83840688b1d41d5d8c4c21bc8f88a8495e" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="9f040ce2f17f0afaf1ddcf9d6a1c1f979320d67329986f235cbbe94d214f7c53" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="fba520dc4f4e3e25a3dd046e78d619046b128904c989ba07a8840ad7d8dd3c1b" name="dlm-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="263b0e340037086ae136104117e9b0b545617ecd985686e524c0e8c37c99129b" name="dlm-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="52b814c4213d888c3e037100f05d075d16a4685db2ea401047a2b479dfedc26a" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="6dcd8776bd7bd0e83f115ec6a1524c43fcaa89ecd3489101703a7a7d05c07460" name="dlm-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="ff2fb20faaac68ab3d010b404daef647410ad03c883217ff4c516ac4075c4403" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="576a2e962b682b3dc28960d827428d29eede8ebc185a4c5ddf838c22f7aed418" name="dlm-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="2b0777075b880d6884a2f80eb57f9ad4be2a8f946acfcd969925359e1d991444" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="6dc42343da256a36a62dfff937cc8d34f493e406ff7bb526221c0a3516863bb4" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="05b581f153dda7594477b20a099d1933b87409ae9e83bbbb45f33a35606d5bdd" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="da6504ec95441bed35bda9231fa6c6fd3f28fdd023c4896dc0edb2234cf68d1f" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="d33890b067417aedece3fb3ef00aebadea696b09d6249aca68a63227f81b6f57" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="31786ba43f1e8a3d0c8f198285a660bf6ca6ec401ef8e34bada1573e90c01ca9" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="fdb73fb182e2cf4c6aa900d4f2274f927fe1cc7468637d8f010243a703b6fba0" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="d77d9e0af5de86757aa205433051cb493f36216ac4bd2de51a65db793019c4a5" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="68c41737eac482f1329757d3cae57cb27ca2e5802245c6c18b4bfbb1e74b2461" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="da157c67e86a1d76f48cfce52a9c64a5caf0f91932bbdd2cb781b1f274aee7a5" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.5.1"/>
  <changelog author="tbogendoerfer@suse.de" date="1687435200">- net/mlx5: fix missing mutex_unlock in
  mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- commit f9de2c8</changelog>
  <changelog author="mkoutny@suse.com" date="1687435201">- Refresh patches.suse/x86-mm-use-mm_alloc-in-poking_init.patch.
  To fix build that missed mm_alloc definition.
- commit dcd5af4</changelog>
  <changelog author="jlee@suse.com" date="1687521600">- Update References tag patches.suse/drm-msm-dpu-Add-check-for-pstates.patch
  (git-fixes 1212556 CVE-2023-3220).
- commit 7faa4b1</changelog>
  <changelog author="jlee@suse.com" date="1687521601">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1aef403</changelog>
  <changelog author="jlee@suse.com" date="1687521602">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1058d70</changelog>
  <changelog author="tiwai@suse.de" date="1687521603">- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from
  irq context (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- commit a8d1547</changelog>
  <changelog author="msuchanek@suse.de" date="1687780800">- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled
  (bsc#1194869).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
  (bsc#1194869 bsc#1212701).
- commit 98497f8</changelog>
  <changelog author="tiwai@suse.de" date="1687780801">- i2c: imx-lpi2c: fix type char overflow issue when calculating
  the clock cycle (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13"
  SSID in the ALC256 (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
  (git-fixes).
- commit 607c980</changelog>
  <changelog author="msuchanek@suse.de" date="1687780802">- powerpc/set_memory: Avoid spinlock recursion in
  change_page_attr() (bsc#1194869).
- commit c747d4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780803">- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- commit 958e41f</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780804">- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- commit d73721e</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780805">- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- commit e8ab3ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780806">- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- commit 26e74c2</changelog>
  <changelog author="vkarasulli@suse.de" date="1687780807">- Update references in the patch
  patches.suse/HID-intel_ish-hid-Add-check-for-ishtp_dma_tx_map.patch
  (git-fixes bsc#1212606 CVE-2023-3358).
- commit f3ebbc7</changelog>
  <changelog author="msuchanek@suse.de" date="1687780808">- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- commit 95a40a6</changelog>
  <changelog author="krisman@suse.de" date="1687780809">- io_uring: fix size calculation when registering buf ring
  (git-fixes).
- commit 4eadbe9</changelog>
  <changelog author="tiwai@suse.de" date="1687867200">- thermal/drivers/sun8i: Fix some error handling paths in
  sun8i_ths_probe() (git-fixes).
- PM: domains: fix integer overflow issues in genpd_parse_state()
  (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in
  ttc_timer_probe (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
  (git-fixes).
- irqchip/clps711x: Remove unused clps711x_intc_init() function
  (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- commit bc06af3</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1687867201">- ice: Fix XDP memory leak when NIC is brought up and down
  (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: fix invalid check for empty list in
  ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom()
  (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe()
  (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active
  (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not
  sufficient (git-fixes).
- ice: Don't double unplug aux on peer initiated reset
  (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context
  (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB
  (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice, xsk: Diversify return values from xsk_wakeup call paths
  (git-fixes).
- commit 6a47979</changelog>
  <changelog author="tzimmermann@suse.com" date="1687867202">- Remove patches.suse/0523-of-Create-platform-devices-for-OF-framebuffers.patch (bsc#1212405)
- commit 6d207a1</changelog>
  <changelog author="mgorman@suse.de" date="1688040000">- Refresh -rt config files.
- commit 4ed99b1</changelog>
</package>
<package pkgid="a872e38b57c6ed58a12dd80b11c5eb18331ad0232b26dd2329eb19fb04203b4c" name="docker" arch="aarch64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="004c0c4264714e5e4e525468e61d31a1fddaed12ae97ecdd8cfe52cbef7442dc" name="docker" arch="ppc64le">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="0e3dc4c7c1786340c7f74a4e4edd41a2623d99625149491e798f4deb0c2fa97f" name="docker" arch="s390x">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="6b700c31aab8b33034f40a6488cb25cd0bd62fd6de5f7b146d80989904ec48db" name="docker" arch="src">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="bfb6e269ee91a7de2a1605afed45c73162b80e67a7a3e5f18640bf6581e0d53d" name="docker" arch="x86_64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="84247b1484809ea651f04155fcffa26e1081f47b05b00c5cd0b5067fb1ec671a" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="f72cba8f3754350eb86fd3d2b49210468b16338d3ca12a38be0fb6ecf4a97f98" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="8e77efb4e9ef00edc65ab3aa4e578c24f0b0779be60f93cbe138fd0d3cd0cf9e" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="5fe727f22c059c2eb863bbe6242016276c997e09be932974f92dc9a0dd460d06" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="715e8217e016860b44136e8be2fa1e10289c186f609c50c7a48088910e9b9bb4" name="dracut" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="13ccaee6749734a15577d002a6ec52780bb700377119d9234dd4f1f9cd081596" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="a93cc82bd1cf62f9db4273c8d74c3f1284b66dbdeabc08092282c043ac8b0e21" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="300274a3b1559a70888a168565b0d4095ec7a08c01f4bd3468becf27be3e7527" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="583fb9edd9563a8f6714f8de0efa7fc48900bbf103d3b335bb3a71fead34e4b0" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="f758f68d64d0764b2a5b86c3e3a42c57c7c4f701551da98f05dfb65d38a4cfc6" name="dracut" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="2f49a3352d0312c1db5295b4a0012c284f4626fcee5af1f3edeb741e26e851fb" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="37c0047e6371b4097a34aad3e09024768d1b86200b46117caa68f01b4d14899d" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="96a4c98444059b49ed7ebe1c26037ebf6fb4e431feaadf75e8be7e1d1426b43b" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="352353c20816624fba355fbbe0c7df0817e3f79fd30a5d2ec98b80a7e3302cb6" name="dracut-extra" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="1d530c4d85075d571f1654230cb995ddc16f64da42b280f8719317c4b31547d1" name="dracut-extra" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="8c8fb369d729a20729ddde4dfdf3fbdeeb508c3dde7cf0051c639017b47b3bea" name="dracut-extra" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="4c3e1c51107ed8bbcd5fb4ea9e0c00529eb20f10154b70abe819cee3acd05cb9" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d5f84abe6c04ec6cc2065a61d39c24f65d93278a4176a124b0b0e789ef691f61" name="dracut-extra" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="91cb63206fe0c90bebc8057c92bc18bd85116e33b44811b71b0e9705845386f9" name="dracut-extra" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="613f3bc77bb4c0767537826671a636e55a3c4d56eaef577f2529f4b9e89eb66d" name="dracut-extra" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="e67cb8b14d1289762820ad5bda2b50cbe7effedfd093633a995d1dfb4999d9d2" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="eeff16dbe1742f2c3ddf5a9ee8d8ee805c83be13e1a5a50e1f5af0dae6a15f43" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="2f6b8434b2cc3617b2f89932e68774ad0252e79482b353e219e0738aeea29f08" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="279fea352e2fc216d4aa9356731f710621868f29b895a1f0608ed6e83f5c190f" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="71234012b73dd31a7e500bc324a474b108bb9e1dc781f8b0bf0ae0e30c529069" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="1dcdd5831036302b11ef5156bffe2020c05a0de6ce91b785ff177429b5b17b2a" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="91f3c5a8bb508c25e3c98d99ec0ac96e6b1344681d89e8df6b08a18621f779e4" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="7154da6dfb255e3dbd3a2fae4129b76a41cf419dee2bcbf0388ede8ed415c40d" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="eef0952f18e897d37b03de7a328d9a2eb7768def267dcbe442b00623eec4cf8f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="52ccb30b17613bd275869af66cbd445e8a9c0dc2a648083b8e10700803844486" name="dracut-ima" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="a4989adc79cf341e0e1cab4c0324a240ab33b20e0ad674c7a689684dd3c0312b" name="dracut-ima" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="7a023b2542b79d34cafccabbe01e9d1af3215728c41ee183897a2176221dba16" name="dracut-ima" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="8d34fa3ca29b85ee0157acab65fcdf375c000c28253596c0c31faa01f14bc1cd" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="57c6b8363b2ca62db84f4584acb37808a90c71ffd812f246f18c09de82644022" name="dracut-ima" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="bd77560df8a2208cb98201472c05e7f6cd74c48de1f8a61d20960845c4ac2f95" name="dracut-ima" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="646f0048a867cf4b711913c9bce2b1bddce786f33da2cdf201552605d8a27ebb" name="dracut-ima" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="c81aba60ebc6e0758073564c768754253f2cf565ae8735efcff2874e16fe1359" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="3b8cf252779e44e965d9ea31f0e784f77bd0d8f33bfe49d30463db8012d4378d" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="ff1047c911c8f2139b6e6eb10087a8dc03ec3e8d02a08d4e2e01ebcf01bd0e0e" name="dracut-mkinitrd-deprecated" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="275762bd30cfd0fcb45ec1300071ce78d84e7e15bab31277ce44f9214e1dca9e" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="c1581067c679a7433de83240d23bab327d1b07d1ba94c4f5f60f5337d8f9247c" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="03d7b308b438af485a32f9cacba22d34238012cb0ee4a60402e65fc3e8f5e4a0" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="e3b22a996c6530c3f058431a706d7fed600ff44947b21b94af9abd2ada1987ca" name="dracut-mkinitrd-deprecated" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5b7d1119cbe41991e15c869a0f8dd2653267f580f6ae483f646e08baf55dbc39" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="95a06e52b36da6e8a998df7e847c94eb1caa15244a9edb1c20134d9eafa7fb5a" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="3fd731491e32070042dc4e296d98c7a97ab7ccb4eed8930c24400de4f7b8a5a5" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1681904360.84ef141" rel="150000.1.50.1"/>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="nadvornik@suse.com" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="nadvornik@suse.com" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="nadvornik@suse.com" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
  <changelog author="oholecek@suse.com" date="1657627200">- Update to version 0.1.1657643023.0d694ce
  * Update dracut-saltboot dependencies (bsc#1200970)
  * Fix network loading when ipappend is used in pxe config
  * Add new information messages</changelog>
  <changelog author="nadvornik@suse.com" date="1661256000">- Require e2fsprogs (bsc#1202614)</changelog>
  <changelog author="nadvornik@suse.com" date="1661515200">- Update to version 0.1.1661440542.6cbe0da
  * Use standard susemanager.conf
  * Move image services to dracut-saltboot package
  * Use salt bundle</changelog>
  <changelog author="oholecek@suse.com" date="1667822400">- Update to version 0.1.1665997480.587fa10
  * Add dependencies on xz and gzip to support compressed images</changelog>
  <changelog author="oholecek@suse.com" date="1673265600">- Update to version 0.1.1673279145.e7616bd
  * Add failsafe stop file when salt-minion does not stop (bsc#1172110)
  * Copy existing wicked config instead of generating new (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1676980800">- Update to verion 0.1.1674034019.a93ff61
  * Install copied wicked config as client.xml (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1681905600">- Update to version 0.1.1681904360.84ef141
  * Load network configuration even when missing protocol version
    (bsc#1210640)</changelog>
</package>
<package pkgid="75348d5b14a9cfb068917863ac63c331ae15d21988d39f7d762207ccb13e2ea4" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1681904360.84ef141" rel="150000.1.50.1"/>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="nadvornik@suse.com" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="nadvornik@suse.com" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="nadvornik@suse.com" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
  <changelog author="oholecek@suse.com" date="1657627200">- Update to version 0.1.1657643023.0d694ce
  * Update dracut-saltboot dependencies (bsc#1200970)
  * Fix network loading when ipappend is used in pxe config
  * Add new information messages</changelog>
  <changelog author="nadvornik@suse.com" date="1661256000">- Require e2fsprogs (bsc#1202614)</changelog>
  <changelog author="nadvornik@suse.com" date="1661515200">- Update to version 0.1.1661440542.6cbe0da
  * Use standard susemanager.conf
  * Move image services to dracut-saltboot package
  * Use salt bundle</changelog>
  <changelog author="oholecek@suse.com" date="1667822400">- Update to version 0.1.1665997480.587fa10
  * Add dependencies on xz and gzip to support compressed images</changelog>
  <changelog author="oholecek@suse.com" date="1673265600">- Update to version 0.1.1673279145.e7616bd
  * Add failsafe stop file when salt-minion does not stop (bsc#1172110)
  * Copy existing wicked config instead of generating new (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1676980800">- Update to verion 0.1.1674034019.a93ff61
  * Install copied wicked config as client.xml (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1681905600">- Update to version 0.1.1681904360.84ef141
  * Load network configuration even when missing protocol version
    (bsc#1210640)</changelog>
</package>
<package pkgid="ebf3f4e6d7e69ca107915192a78e9c2d6c4fcd59571d324e5f7d069e201a46a8" name="dracut-tools" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="adc8ba9701926e1cdd101023a6f144e098e74b08bae3f625f090dd31c4f21349" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d92b326718d7b7fd0f36ee1f3775ef993630298e7387da2a5f23a1e24d91587b" name="dracut-tools" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="5baeff282fd3d624a533d9e617e5ca84296f5f331cd0a9a68a1e6efa14d887ab" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d14a0e29b25d3374835e84e2c4adea9106aeb0d92f1a37ae3849b02596c31f19" name="dracut-tools" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5e16a7bddd51918de5ed8f442369857767fccc7b76a0e9250f17845aa42d0c88" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="c97a5c7300734f15b3a5fcb313b70d30d871a8abd96a0dbd476799df2cc7f40f" name="dracut-tools" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="7f9a0e2e3b69029ee54e47b24ffb51e4716b29ec35a70620e985b799a6a78348" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5d48e1e39000df0798406cdda03b93ef761c1401f500bda066d15dab99f127d5" name="drbd-utils" arch="aarch64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="34c6317ccef39cd5cd789be37e5fb65c7009f57e04b209d96cf7ebbd5161c325" name="drbd-utils" arch="ppc64le">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="f2a6b195da04a93d7f8414c4c266154d6c5efb9eb3e0ea5c8b9aa18692ec9e79" name="drbd-utils" arch="s390x">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="7457e40c79741cd3b44ab0012f32a980067dd08c1866e0281a0a6c967a702e1e" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="5afe4b1304685ac44186d785ba4ada09bc21b887da273f3438ee561c93e8cceb" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="ce10e5983796b89624ef482bcbbb1e9df7661998d9f96ba921d2a40484278dd9" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="b0ca69ccce4af553c34939474b4bdb140c2fba67ebd92e755b88504876f43de8" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="125c7f43ad856fd0e29bee384250b15d786fe21945df1dce3822b0fe1935564f" name="dtb-allwinner" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="6ad0b033bb615a83d2c8336956c0903ec07b3c18d134e29435de88a318ea7639" name="dtb-allwinner" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="fdca0320f797d4dbe6c9ffe2b7109b3f40922417b1ff764d373d96a15c5651f0" name="dtb-altera" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="b49dd087f6e8ad357daae472665172564d7bc8e69aa1dd09afcde9820296cd96" name="dtb-altera" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="6d77c952dbf517019fb6b6a27ad26cf695d1c84d5db6eb1e7cb9a75a51b54c66" name="dtb-amazon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="abbcab889458250cb82726f9c6718386bbd1ea49680af2281d8ea2bcd4677046" name="dtb-amazon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="7cbbdc9f4857b21f23156b971efc0802952e704094d7c840ef5879f7ce87c183" name="dtb-amd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="d1038d3475f5e49b17ba6caf59a54a47e2d849a2d67f3cecc38ae3da69b9987b" name="dtb-amd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="92c81f011217d90181d18af768a8d54e94d7b33b3d0d1d429eb0da0906403666" name="dtb-amlogic" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="3aaab6efa08df09e1dcee66a8e8c18377d413dd486ce1303879365b351a6a23f" name="dtb-amlogic" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="7a562cf93f1c50ee40c9318d173fa111a3b8315d489ed161f509afdcdbb303fd" name="dtb-apm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="439c14502cc64396f4b5eb832f2a62eea3f4396cc91548ba2883570be71c4fd1" name="dtb-apm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="0e875db837ca4f61b4d00823ef00ffe1b65c77ff59ab30a22b73283105e7bba8" name="dtb-apple" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="2453e33c515373fdb5a47601888819a022d8c9f3e74b8e8ec5ed966e124b987a" name="dtb-apple" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="eb040f8e8e8ada1ffb57c286084df96c7be6b7e0a5a55dfa9047bd4650e3d994" name="dtb-arm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="ed2cd334b3577f5e4a9dacbb765437eeefc68eb856ee6edbb315f177b7788b14" name="dtb-arm" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="5af03934967952b76288992f1b88580572189b9ed3edb05f33f8f0179c72c84d" name="dtb-broadcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="0cc2ba94c9003b97c94f28b738eeb7790db776040b4b57707d55090c765a7c6b" name="dtb-broadcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="9cb519d2f7a934eb9eaa5237df9cb1daaf7a0dc3b24dea7bae972300d7d1c9ac" name="dtb-cavium" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="6a75cea8ffc0968e1e86314e5bb3bbc0fa2b998b1af3595bd44fd49a7d821bf5" name="dtb-cavium" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="3a4fbc7d55e26105ea8afeb398ed8972aaa0d6c2c1e47431c1d1da19e09bca4b" name="dtb-exynos" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="23dec1a0a52a3f1c61e89cb49356dd1c6b6934ef59601adea50816dd44f26c69" name="dtb-exynos" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="6813146f3a7cfbd5604576324b606dbe35dd15b2d51de9ff60a912c5a5100486" name="dtb-freescale" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="bc25731e31237bd9d48d8a29bb32de63928ac45d32117d1214753b697c56b0c2" name="dtb-freescale" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="9cdf40da475b3ed10a4fda46a044ba90e875c44f9e239e3c3327c7acd8462508" name="dtb-hisilicon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="b29a9267a150442b564b39e95d43d9bbfc8fa9184c43afb46883b809ae70677a" name="dtb-hisilicon" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="9fda6ee3be75308ab16b4541737d3d65921f454b214d54d6d41b4c5dbe1be99c" name="dtb-lg" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="223bb209a9f3b0cef197af87973a3a5d2032b7073605d61adc5e07f4d66201c9" name="dtb-lg" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="035431c1557f5affd4ac5aa7691e85c26d2d00642eb9513326c93cf88fa85323" name="dtb-marvell" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="920c2638389f7109c428930a828c6d78d83381af32f6a63bd7c309b6a01d1632" name="dtb-marvell" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="19d660d606d3b75a4ec8d1819d8691a959b3cd105dc758202296946ae0dae9ab" name="dtb-mediatek" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="352ed127bad4d3b43b1ed423f9ee06ac5c4ee09108332125726b65c42a5440a2" name="dtb-mediatek" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="aa92838d7f2afa0fc393efbfcc2d0c94104c737afb1fe40c8c73554512bdc514" name="dtb-nvidia" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="2a95f8d7eee9b305329e73ffdf9a6cef670b6aebec0c40b4582cfa0ba39534dd" name="dtb-nvidia" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="acab3f7b3afa1dc55f0a6083e0fb0142aeabdf1ab4dc74b00c50a00877543149" name="dtb-qcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="1f8d5cc48008ef4c70f71edc9d00d8fb63eac5ee0daf57dc4886620b73737df3" name="dtb-qcom" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="de8a2978206102c165c99a5ccd08d5ba7d597a771854e3c0b39c4c8c9f68bcc1" name="dtb-renesas" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="776db97b5582e91ccd451ee3482743ed2eb9bb2b113ed75918bf9ac35ae9ddbb" name="dtb-renesas" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="501a2737fa09b72baabbd0ceed21dde10be93839076a5cc5d7ab890e9cc6a440" name="dtb-rockchip" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="3996da4c6b93a67bfaba051d67e53ead121bd062d3b89ef7fb314d210e7b77da" name="dtb-rockchip" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="982f2e3f0107ae7921f039fea42b1483fd129836e61fe2def3fd4346e074cf6b" name="dtb-socionext" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="ad46ad963dc1eb1842f8fbc689126c0227f26f974924ffb4d327080ca9b49ee2" name="dtb-socionext" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="61e27743098195a282d4d1f6773fc83da1fc87753983121104c5e711ea5970dc" name="dtb-sprd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="b2ec34f0ea4d6147e9ce1ba6c65b9d7761b992a37e09acdcd387e211aea0c666" name="dtb-sprd" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="02d89f9b01fa2c1a242e1faee643e8909d85f25ca041f8ec87ee57367d6184b0" name="dtb-xilinx" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="22e433aed2ac2b7a2ea81ae42a2e5d32ed84817551b5c5019b953ae55bba9c8f" name="dtb-xilinx" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="11025ad47a0be6f065f5d3bf63aa0a9384506b4e84e1f23bc68bf37506c1938a" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="922c23652d5c498f11d5090a389a08c8a9a4f73203fbbf46be165f048a7221ae" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="dcadefca173b66d79c14d1cb7bd5096190e50330be4311fc33110f71176aaffe" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="c6db6d684ff010d8a1ec29efc7ce56b27f1f24ed8c036b9ccf5cda4fc150514d" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="a7ea0fa984a14d15a95d125f8be239a71f26b43f66720befe243e5d69729095f" name="firewalld" arch="src">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="72d316c3ac13d0a787d1d8975e38ee8d0050d4e98dcb99cbc5150026a1b6188b" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="6aae18f8551b7cdff43c2c5c3bd41fa2405ba45a730d1c0422b2142994669514" name="firewalld-prometheus-config" arch="aarch64">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="f48a8523a0b5734b4d0b6c7f690c91a547dc5eccd11c21c5576c509733e28b02" name="firewalld-prometheus-config" arch="ppc64le">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="9d8e7bc61b2925d86b524359932d8f0cbd7269510d5e43a47d0312270a6dc823" name="firewalld-prometheus-config" arch="s390x">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8f1f1d1dac028495a77c14d3a0561506132556fefa92c0fb82f3737f96075a8a" name="firewalld-prometheus-config" arch="x86_64">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="223a2aa9f5c60c448ffe0a4899ea8d552388ae02a640c2decb0480f8ffa3f428" name="fonts-config" arch="noarch">
  <version epoch="0" ver="20200609+git0.42e2b1b" rel="150000.4.10.1"/>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="jengelh@inai.de" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="sflees@suse.de" date="1544529600">- Update to 20181211
  * Update subpixel rendering config
  * Fix missspelling issue (boo#1111791). so
    Drop fonts-config-fix-misspelling.patch
  * Fix (boo#1092737).
  * other minor tidyups</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1547899200">- Update to 20190119
  * Allow non-ASCII letters in font names (boo#1049056, bnc#1101985).</changelog>
  <changelog author="alarrosa@suse.com" date="1591704000">- Add a _service file
- Add code in %post to check the value of
  FORCE_MODIFY_DEFAULT_FONT_SETTINGS_IN_NEXT_UPDATE and if it's
  set to yes, empty or it doesn't exist, then update the values
  of FORCE_HINTSTYLE, USE_LCDFILTER and USE_RGBA in
  /etc/sysconfig/fonts-config to use the default settings
  established in the 20181211 release (boo#1172022)
- Update to 20200609+git0.42e2b1b:
  * Add variable to allow fonts-config to update default settings
  * Fix en-US, en-GB font matching</changelog>
  <changelog author="pgajdos@suse.com" date="1685620800">- get the homedir from getpwuid when no $ENV{"HOME"} set
- added patches
  fix bsc#1210700
  + fonts-config-homedir-getpwuid.patch</changelog>
</package>
<package pkgid="e36cf7bcfeab1d05da3f2cd44031738a99e463668ad8b8cb538553203ae5bcf9" name="fonts-config" arch="src">
  <version epoch="0" ver="20200609+git0.42e2b1b" rel="150000.4.10.1"/>
  <changelog author="pgajdos@suse.com" date="1417953600">- updated to 20141207
  added --info option (will be required by yast fonts)</changelog>
  <changelog author="pgajdos@suse.com" date="1421064000">- added Command: metadata to relevant sysconfig variables
  [bnc#912279]</changelog>
  <changelog author="pgajdos@suse.com" date="1429272000">- updated to 20150417:
  * added --user option</changelog>
  <changelog author="pgajdos@suse.com" date="1429617600">- updated to 20150421:
  * use mkpath instead of make_path [bnc#927968]
  * behave better when
    /usr/share/fontconfig/conf.avail/30-metric-aliases.conf
    not found</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- updated to 20150423:
  * hide local system family preference list when user's one is
    in action</changelog>
  <changelog author="pgajdos@suse.com" date="1429876800">- updated to 20150424:
  * introduce --remove-user-setting option</changelog>
  <changelog author="schwab@linux-m68k.org" date="1439553600">- fonts-config: fix use of $ENV vars</changelog>
  <changelog author="qzhao@suse.com" date="1440158400">- change fontconfig.SuSE.properties.template to fontconfig.SUSE.properties.template.
  * To full fit FATE#316521 Get rid of files using the old SUSE spelling.(bnc#942314)</changelog>
  <changelog author="pgajdos@suse.com" date="1447070400">- Roboto prefered for sans and serif and Source Sans Pro for
  monospace [bsc#951898]</changelog>
  <changelog author="pgajdos@suse.com" date="1473854400">- version 20160914:
  * comma and the rest of family string is ignored while translating
    preference lists from sysconfig to fontconfig snippets
    [bsc#998300]</changelog>
  <changelog author="ftake@geeko.jp" date="1474459200">- version 20160921
  * add 59-family-prefer-lang-specific.conf to specify prefered
    family for each language
  * fix Noto Sans CJK is used for serif alias (boo#998301)
  * assign monospace to default of Oxygen Mono</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1520856000">- Do not create fonts.{dir,scale} in encodings directory
  (boo#1106850).</changelog>
  <changelog author="i@marguerite.su" date="1525089600">- new upstream: https://github.com/openSUSE/fonts-config
  development will continue there.
- drop patch: fontconfig-infinality-generate-tt-groups.patch
  * infinality project is dead, we use a static result in upstream
    instead of generating it every time.
- update 20180430
  * support color emoji
  * modern fonts for symbol
  * add configurations for Noto Sans/Serif CJK</changelog>
  <changelog author="qzhao@suse.com" date="1539604800">- Add fonts-config-fix-misspelling.patch: fix misspelling in
  configuration file(boo#1111791).</changelog>
  <changelog author="jengelh@inai.de" date="1541419200">- Use noun phrasing and user-independent wording.</changelog>
  <changelog author="sflees@suse.de" date="1544529600">- Update to 20181211
  * Update subpixel rendering config
  * Fix missspelling issue (boo#1111791). so
    Drop fonts-config-fix-misspelling.patch
  * Fix (boo#1092737).
  * other minor tidyups</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1547899200">- Update to 20190119
  * Allow non-ASCII letters in font names (boo#1049056, bnc#1101985).</changelog>
  <changelog author="alarrosa@suse.com" date="1591704000">- Add a _service file
- Add code in %post to check the value of
  FORCE_MODIFY_DEFAULT_FONT_SETTINGS_IN_NEXT_UPDATE and if it's
  set to yes, empty or it doesn't exist, then update the values
  of FORCE_HINTSTYLE, USE_LCDFILTER and USE_RGBA in
  /etc/sysconfig/fonts-config to use the default settings
  established in the 20181211 release (boo#1172022)
- Update to 20200609+git0.42e2b1b:
  * Add variable to allow fonts-config to update default settings
  * Fix en-US, en-GB font matching</changelog>
  <changelog author="pgajdos@suse.com" date="1685620800">- get the homedir from getpwuid when no $ENV{"HOME"} set
- added patches
  fix bsc#1210700
  + fonts-config-homedir-getpwuid.patch</changelog>
</package>
<package pkgid="c5351f54d2c373697720ccfcc831a9d3a5b919eb4b72a287e10748388b47e99a" name="frr" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="9c484b217302707f604837021bf6122560c0d9b65da8f329e4fad3820e9c3e71" name="frr" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="be254e49efb1330572800f90bcba0032358cbce2f9edf070e60265377b4cb653" name="frr" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="06fdb385b8da0f62114a3aa07498712f5d7f625d61ebc69b52cb24cbc145f890" name="frr" arch="src">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="638a60104012448c01fe8a5a4f87c1ec4793b274071ed626bf1cf3d49613576d" name="frr" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="c65a828d487b66d3aceeba02dbf7e56f6d86818ecc02a8af6a58758a5c19dee6" name="frr-devel" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="ad14707fe0a46d73df7c68f50004b123b150c65cd0b1e304d48b43f8e3703de3" name="frr-devel" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="e43164bab56244ff8d082cc4318a94ce6d3d053022714e13c1402d6b33714e7a" name="frr-devel" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="9e95a4639d68f2672e89ca85ed1c6952d6a20693ed1660fdfa99f0750dc05827" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="4b93574ba5af23b471c0ac2f2598f3233a5a5ecc0da683161a88a01e93cc8ddf" name="fstrm" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="4d686f86ad83654a50ba747c73f55a3a2c5aa954fff5a9ad6682ff2135cc19ca" name="fstrm" arch="ppc64le">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="10505e8af033920ddcf1d365abaeac399cfadfdc420e1a50dd32509c92b6a115" name="fstrm" arch="s390x">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="4b60df07acca31c25f08eedcd6ddc35c01a0ecc856db7dc512a2965bc846e9b1" name="fstrm" arch="src">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="dfe8776d459bbe807a961da05ee75b07e603335de1dd937f2294d76cc7506819" name="fstrm" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="320cad0f0ce569ee9eeb3d5844274dc55daf3c1e9ad015af8c9ddde1d8b8fac5" name="fstrm-devel" arch="aarch64">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="0f18dc52678a38d0df4becc18c163d91087b6c51c1de2576f4cc118352880e05" name="fstrm-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="37ee1d66496588fd29c0eaaad1a350277710c2e6d8ad20c2bfe2e7e7555d7a4a" name="fstrm-devel" arch="s390x">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="006d07a09d23ee2cb164f5ecc20f977c4e1eda60e73e8bff6e08d9a27f382ca9" name="fstrm-devel" arch="x86_64">
  <version epoch="0" ver="0.6.1" rel="150300.9.3.1"/>
  <changelog author="mrueckert@suse.de" date="1428580800">- initial package</changelog>
  <changelog author="mvetter@suse.com" date="1434456000">- cleanup spec file, remove .la</changelog>
  <changelog author="thehejik@suse.com" date="1434542400">- fixed group of shared library-</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- require the correct version of libevent to make it fail early</changelog>
  <changelog author="avindra@opensuse.org" date="1514808000">- update to 0.3.2
  * Accommodate systems without pthread_condattr_setclock
- 0.3.1
  * Add support for '-' as a filename for stdin/stdout
  * Destroy condition variable and mutexes in fstrm_iothr_destroy()
- 0.3.0
  * Output file rotation
  * Change state properly in fstrm_writer_close()
  * force output flush on sighup
  * Build on OS X
- cleanup with spec-cleaner
- use dist tarball instead of github archive</changelog>
  <changelog author="jengelh@inai.de" date="1514894400">- Compact description. Fix RPM groups.</changelog>
  <changelog author="mrueckert@suse.de" date="1586088000">- Update to 0.6.0
  It adds a new feature for fstrm_capture. It can perform output
  file rotation when a SIGUSR1 signal is received by fstrm_capture.
  (See the --gmtime or --localtime options.) This allows
  fstrm_capture's output file to be rotated by logrotate or a
  similar external utility. (Output rotation is suppressed if
  fstrm_capture is writing to stdout.)
- Changes from 0.5.0
  - Change license to modern MIT license for compatibility with
    GPLv2 software. Contact software@farsightsecurity.com for
    alternate licensing.
  - src/fstrm_replay.c: For OpenBSD and Posix portability include
    netinet/in.h and sys/socket.h to get struct sockaddr_in and the
    AF_* defines respectively.
  - Fix various compiler warnings.
- Changes from 0.4.0
  The C implementation of the Frame Streams data transport
  protocol, fstrm version 0.4.0, was released. It adds TCP support,
  a new tool, new documentation, and several improvements.
  - Added manual pages for fstrm_capture and fstrm_dump.
  - Added new tool, fstrm_replay, for replaying saved Frame Streams
    data to a socket connection.
  - Adds TCP support. Add tcp_writer to the core library which
    implements a bi-directional Frame Streams writer as a TCP
    socket client. Introduces new developer API:
    fstrm_tcp_writer_init, fstrm_tcp_writer_options_init,
    fstrm_tcp_writer_options_destroy,
    fstrm_tcp_writer_options_set_socket_address, and
    fstrm_tcp_writer_options_set_socket_port.
  - fstrm_capture: new options for reading from TCP socket.
  - fstrm_capture: add "-c" / "--connections" option to limit the
    number of concurrent connections it will accept.
  - fstrm_capture: add "-b / --buffer-size" option to set the read
    buffer size (effectively the maximum frame size) to a value
    other than the default 256 KiB.
  - fstrm_capture: skip oversize messages to fix stalled
    connections caused by messages larger than the read highwater
    mark of the input buffer. Discarded messages are logged for the
    purposes of tuning the input buffer size.
  - fstrm_capture: complete sending of FINISH frame before closing
    connection.
  - Various test additions and improvements.</changelog>
  <changelog author="dmueller@suse.com" date="1629115200">- update to 0.6.1:
  * fstrm_capture: ignore SIGPIPE, which will cause the
    interrupted connections to generate an EPIPE instead.
  * Fix truncation in snprintf calls in argument processing.
  * fstrm_capture: Fix output printf format.</changelog>
</package>
<package pkgid="adc72a8e89e6b04b9d6831fdc78e225fec9d8b9463a3a7e7af4aa3af81ff0da5" name="gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="698b783992ac2b83733dc7c77e91f2823ed27e4268782b0095ff9d436dd26846" name="gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fa746a1e1b46b132006cc879a05969886335651c7bcf9c2b3d80ad033305f636" name="gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b23714ec1b45c056eaf48c43bb2e29a10f1bdfc95ffa301bbf635e3ca061a232" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="baac405d78c6de77852268f0f8cf86f4354f7a581d95ef4bed5cf9067ec95a36" name="gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a0f8efdb9fab5e4de0b836e161ef39a62fcc9e945da29e06163915c42f4eb171" name="gcc12-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="26629c38836efe31a7d39b1a95c683ef6d4f98de1419806293ea476c8d0884c7" name="gcc12-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="69787c4719926a5c8d8bf5a247130b0befeee63a77b3d8f163ea075c51b6852d" name="gcc12-PIE" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d897073c637872205932822c1883597dbe0b1c36f1cf03275a498df6189e6126" name="gcc12-PIE" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8cd283e6f6cd29d4498f0acbe2f6e212505a03fc1e6c2acf3992369cfb2b4400" name="gcc12-PIE" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="47d8c5e534a13b5a9e4587837b3178492e63f65c3259b778387ee1ed3ec24c16" name="gcc12-PIE" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5edee9151a3df76a26e3b5a6b8d1ccfb5c79a642a7d135dc02767ff8e1148bdd" name="gcc12-ada" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d26d8f4e6c511242413d9e2ddf5dc294bbaff939ae9c964c036c3dc72e961718" name="gcc12-ada" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="453d3f7ba632de1c48fb9fb7fa37399dd3ce3e5454468a4f71b26c9c113f7622" name="gcc12-ada" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8c3df755f53ed1da632c07d8947085b89d62365fe49ec708aa89eb28df745a25" name="gcc12-ada" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6672a357eee1b24a62f7404227738b72c1bfc0de45f8ed33baa19aff0570dc30" name="gcc12-ada-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="aa5badc3120aed640b7b3aa861bf7fb98413cb2147cd1fae549f6ee53afde954" name="gcc12-ada-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e332d64c01adfc0dfd2b067f58ccb05103f2b81e5a71ce283c77a6445e4d5f31" name="gcc12-c++" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="596532c7bb9abe9d50937cf9b1e4073e42b3dd5b887db873952396c178459c8b" name="gcc12-c++" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8688635153cea0f3db7c649846580bdfa6ac790eab25a2828507cbd0fdf66caf" name="gcc12-c++" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="76f7d82cf2eb4f5bf296825aea3b9877e214db36e055baa12f3db184d5934d8b" name="gcc12-c++" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93e13047a7adba2138e10e3a5c2fcc0d124601a3ae4bf2690ac58b6b1d25a389" name="gcc12-c++-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2ff89bd547663ecb6f50cb97a36157a1b97bd6d3914cbe29afea88f0b0e5542b" name="gcc12-c++-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="971285ff6a3ecb200fb30396fcfd21c0e2d1692a34872adabb95f6ebd838c7ae" name="gcc12-d" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cae30a2725cfa2bc2228be605e720ea4f12b43e8b3b45fcda1e4d4f8a4a1c172" name="gcc12-d" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e3f0669a349e9a8c8be162b8ddcf177c66e294fb691235099914c1e45772e92a" name="gcc12-d" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a2c8444f214bc61e0e5beb5f505625891a5e1968e6668351af60f159af2369a0" name="gcc12-d-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17fc07b09246e2f73da6d5c0058fa58114b72ced268cda428e7065f5a50840bf" name="gcc12-d-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a00160e6ad357b1f77b4108d7b8197db2e81b4482c16082a161f207f936b029b" name="gcc12-fortran" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5eed48843e18e7381214227b516fb29e21b7dd96d527a333d6294869ca42e689" name="gcc12-fortran" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8a83088f25746d5a07be260ea108423916eb591de0257c271054329510fe123a" name="gcc12-fortran" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="18c7b06acad40369eb479857fdaea9bb2f34a9dbe2183590149936d2064f1bde" name="gcc12-fortran" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="00cde869ed33d25562c84b7f45a91b9fce01ba607b16e7988353e212c0ee6cc4" name="gcc12-fortran-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="75616e6294dbdfd286abd06f23074260a96729cb90712211299e5ee501446610" name="gcc12-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="992599285599a4184149c32d42fcd76ee460bf0f601fa79c7a0c7c54617c641e" name="gcc12-go" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="05c89b9389b762ee54bd18cc6f395a2dac17e6cf6e32ada6a49489b25860e35c" name="gcc12-go" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93c6afcc19dfba040da97dd1d98b5acae5709344f7611e60ff9507bcb73f4430" name="gcc12-go" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="086a1e2ed27a2ff02f307c61beb3ecd55d2b1d576bee57714e9b462b4dd685fa" name="gcc12-go" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ea8bc6c08574b695cc38381f166fe346a93324a4a5d8d339d8396bec0d9cf01b" name="gcc12-go-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="334462cdfe6daf359f597f82b342752059f489ffd6b2a193741dacc05ec10387" name="gcc12-go-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d94f494775cfd7b526873a6cda6f8e5f10293138445b87b0e0761ea011348eb0" name="gcc12-info" arch="noarch">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4b30ef68bcc2243239e8a1ba0245d3ba3b99311f4b8a766da240836afd3db2ab" name="gcc12-locale" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e8bdcbf527638765dcfd2b767e2105fe3b578816212b1957add43d44b7ea5384" name="gcc12-locale" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="aa9fb9f09dd13bada5d00b90de5d920f27bab58280c1d6b1ba7448a4481e0ce4" name="gcc12-locale" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6000b14cf6981f701fa1d8537fb0029343b6e490d851b77bff6e2bcd400dfee0" name="gcc12-locale" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0a6b7ec93cabeba94392466a15a57ac7acb4e6fc3256a64f70d8fffdc3318b06" name="gcc12-obj-c++" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2a14f5c1cac350ab9b8bed038aa7a0cbcd4fe2a26722f5a5faee7104282fc095" name="gcc12-obj-c++" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eca8b4d2b1a188ee40a319c502cab787352355b918f73d717cfc2e8f8699187c" name="gcc12-obj-c++" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b6b7d1d257eef1ecfa3eea2f748f15718871f18835f4baa92ee55525d8bbd678" name="gcc12-obj-c++" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="824cae23eeda68c4967ee66d6b7592f39389613238281fd1e0b52ca55bfb37c9" name="gcc12-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8d6d5d1b8b286c51f895631ae6eadabfb1ad864190ef39bb86490e8bab800e95" name="gcc12-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d4af7e724f9b647f7b1229b3c37baa49a3faeb76d0f7ebe8d10ab2b970e5e3ee" name="gcc12-objc" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9241e5ab86dd712e77a7ee7582c9baacd7689c056bf4782fad17426ca33c071b" name="gcc12-objc" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9623b2da25fb225a4f812a45ac18ca5374174684a5631768fe4af78b0f07a899" name="gcc12-objc" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7585f1f819922efa1df54458d78521fd66f83eea382f4db529768443d4af8ac1" name="gcc12-objc" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bf000d2c6e82145bed51110532d4f391e1c57261cdccec8269e6b9b1b83861a6" name="gcc12-objc-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="457d91525b95b7a46716ae7c5161f4b3685ace4c8237034ad9a6b7580c14d940" name="gcc12-objc-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ceb9e1718d18009a65d2ccafe83e0b849138ce4b5cf8fc632ca22ff2736a07d5" name="gcc12-testresults" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93640fa5b9fe1685a4b51a66c26b380ae3ddd04f0a8ff9753e1193104cf86cab" name="gcc12-testresults" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c06afae62f97c7bf05cc0ad6baf3aaff7d1092afd42a65a28677359202579f74" name="gcc12-testresults" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="240b092daf40643f22d66242b0c32aae0b2c9b0e2d7b4aa3a62dacbe56d1c7be" name="gcc12-testresults" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="41cd04df8d14a1e937fb971eaab2d7aaa881c9f3a4c315b50ec187e379dd4eab" name="gcc12-testresults" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="174bb803cb38057d566fcf3d5d153ae5e9a88dbe0786c1199b10ffa466e4fa05" name="gdb" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="2012c29666d28f3a3f188bedfe5db2a7f95cd804d5522002f46d71d311b64f8b" name="gdb" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="8c18a325181a015d4a759362d9f8d1f71759e8ded9043e833039d32b1585050d" name="gdb" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="a3c8f30957d491cea956899c0cdc0040f4fde64e4923f06ba509c80d001c3845" name="gdb" arch="src">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="3fb8140a6f21ca15db417548f06ee90d75e9cf04098f67dd387988568c4c91b5" name="gdb" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="a3b5715dd0656f1a9ce63edc0d39217e44eb722a98eaf4f889ade3bbf7baf2e1" name="gdb-testresults" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="b7576f366bef3450a5c1978bca2395d6deea5993a8400d46aba850fe00fc7c87" name="gdb-testresults" arch="src">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="4ce91465241558760445562286bbe160a4f7b525c80197d5ddcd365f6a1e9816" name="gdb-testresults" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="5446d0998e87f6e92d99387c3825d1ab3bff38fd47311c1832c2636300df0654" name="gdb-testresults" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="fe9a59907b7e6bd81a122b3f94a0da91e413e4ffdd7260e77735d8cce10b08f7" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="de79990c9d6875d92357696a4f2df510e338f3d040e3c4cb35b2765611f50af6" name="gdbserver" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="8d1a9c624edd0f25da8720f5992041a8ac7b2bc1456716373bd2858da92e7922" name="gdbserver" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="219a3e841efdcc83549d73586991e921df081942e3c7741aa144d9908293ef79" name="gdbserver" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="648f6abf95f117aa9c8d17cc142db1cbe1f5af07af76b64082d8852d6f5c1787" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="56b64dca9f4256f9dfc3df3a5d6d391a5163e49779f21b3d0f1027c624ef2641" name="gdk-pixbuf-loader-libheif" arch="aarch64">
  <version epoch="0" ver="1.12.0" rel="150400.3.11.1"/>
  <changelog author="plinnell@opensuse.org" date="1531051200">- initial package for 1.3.2</changelog>
  <changelog author="asn@cryptomilk.org" date="1602504000">- Only build with AV1-AVIF support
- Update to version 1.9.1
  * https://github.com/strukturag/libheif/releases/tag/v1.9.1
- fixed CVE-2020-23109 [bsc#1192382]
  (bca0162018df9a32d21c05aad1fa203881fa7813)</changelog>
  <changelog author="asn@cryptomilk.org" date="1602590400">- Fix the License</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1604232000">- Add build condition to enable additional options, codecs and
  example binaries.
- Remove rav1e and dav1d support for the moment as still WIP.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608120000">- Updated to version 1.10.0:
  * New API: may access all (vendor-dependent) auxiliary images
    (e.g. hdrgainmap, semanticskinmatte, ...).
  * When ICC profile is present, will now write two color boxes
  (nclx and ICC) into AVIF files. Also reads files with two color
  boxes.
  * Alpha image is now saved as monochrome.
  * Loading of 16bit greyscale PNGs in heif_enc.
  * Deprecated heif_enc option "-E".
  * Remove dependency on alloca().
  * Bug fixes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608206400">- Re-download tarball and check with osc service runall
  download_files, all ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608897600">- Build with dav1d and rav1e support, do this via:
  + Add pkgconfig(dav1d) BuildRequires.
  + Add conditional pkgconfig(rav1e) BuildRequires (currently
    Tumbleweed only).
- Drop libheif-lang Recommends: Package does not exist.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: generate libheif1-32bit, which is a new
  dependency for ImageMagick-32bit after that one now enabled
  libheif support.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- update to 1.11.0:
  * fix writing ispe box in HEIFs
  * nclx output profile encoding parameters
  * change the way nclx profiles is written so that macOS can read them
  * API for listing file brands and checking file type
  * fix heif_image_handle_get_depth_image_representation_info()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1623412800">- Update to version 1.12.0:
  + Check for MIAF conformance and add as compatible brand.
  + Signaling of premultiplied alpha.
  + Parse AV1 obu_sequence_header for av1C box.
  + Write pixi box in AVIFs.
  + Save alpha as monochrome in AVIF if possible.
  + Many build fixes.</changelog>
  <changelog author="sbrabec@suse.com" date="1653652800">- Add missing gdk-pixbuf loader scriptlets (bsc#1199987).</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- security update
- added patches
  fix CVE-2023-0996 [bsc#1208640], buffer overflow in heif_js_decode_image in libheif
  + libheif-CVE-2023-0996.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1683806400">- security update
- added patches
  fix CVE-2023-29659 [bsc#1211174], segfault caused by divide-by-zero
  + libheif-CVE-2023-29659.patch</changelog>
</package>
<package pkgid="84597c7afdabca4f6f3e576bc5e16dc031ba910457d8ac6cbf4982f781f3f07b" name="gdk-pixbuf-loader-libheif" arch="ppc64le">
  <version epoch="0" ver="1.12.0" rel="150400.3.11.1"/>
  <changelog author="plinnell@opensuse.org" date="1531051200">- initial package for 1.3.2</changelog>
  <changelog author="asn@cryptomilk.org" date="1602504000">- Only build with AV1-AVIF support
- Update to version 1.9.1
  * https://github.com/strukturag/libheif/releases/tag/v1.9.1
- fixed CVE-2020-23109 [bsc#1192382]
  (bca0162018df9a32d21c05aad1fa203881fa7813)</changelog>
  <changelog author="asn@cryptomilk.org" date="1602590400">- Fix the License</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1604232000">- Add build condition to enable additional options, codecs and
  example binaries.
- Remove rav1e and dav1d support for the moment as still WIP.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608120000">- Updated to version 1.10.0:
  * New API: may access all (vendor-dependent) auxiliary images
    (e.g. hdrgainmap, semanticskinmatte, ...).
  * When ICC profile is present, will now write two color boxes
  (nclx and ICC) into AVIF files. Also reads files with two color
  boxes.
  * Alpha image is now saved as monochrome.
  * Loading of 16bit greyscale PNGs in heif_enc.
  * Deprecated heif_enc option "-E".
  * Remove dependency on alloca().
  * Bug fixes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608206400">- Re-download tarball and check with osc service runall
  download_files, all ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608897600">- Build with dav1d and rav1e support, do this via:
  + Add pkgconfig(dav1d) BuildRequires.
  + Add conditional pkgconfig(rav1e) BuildRequires (currently
    Tumbleweed only).
- Drop libheif-lang Recommends: Package does not exist.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: generate libheif1-32bit, which is a new
  dependency for ImageMagick-32bit after that one now enabled
  libheif support.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- update to 1.11.0:
  * fix writing ispe box in HEIFs
  * nclx output profile encoding parameters
  * change the way nclx profiles is written so that macOS can read them
  * API for listing file brands and checking file type
  * fix heif_image_handle_get_depth_image_representation_info()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1623412800">- Update to version 1.12.0:
  + Check for MIAF conformance and add as compatible brand.
  + Signaling of premultiplied alpha.
  + Parse AV1 obu_sequence_header for av1C box.
  + Write pixi box in AVIFs.
  + Save alpha as monochrome in AVIF if possible.
  + Many build fixes.</changelog>
  <changelog author="sbrabec@suse.com" date="1653652800">- Add missing gdk-pixbuf loader scriptlets (bsc#1199987).</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- security update
- added patches
  fix CVE-2023-0996 [bsc#1208640], buffer overflow in heif_js_decode_image in libheif
  + libheif-CVE-2023-0996.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1683806400">- security update
- added patches
  fix CVE-2023-29659 [bsc#1211174], segfault caused by divide-by-zero
  + libheif-CVE-2023-29659.patch</changelog>
</package>
<package pkgid="3ee06b81d03ed2b9cd449b4365a7fa1668291e93372fccd2958c145b1f3a5e33" name="gdk-pixbuf-loader-libheif" arch="s390x">
  <version epoch="0" ver="1.12.0" rel="150400.3.11.1"/>
  <changelog author="plinnell@opensuse.org" date="1531051200">- initial package for 1.3.2</changelog>
  <changelog author="asn@cryptomilk.org" date="1602504000">- Only build with AV1-AVIF support
- Update to version 1.9.1
  * https://github.com/strukturag/libheif/releases/tag/v1.9.1
- fixed CVE-2020-23109 [bsc#1192382]
  (bca0162018df9a32d21c05aad1fa203881fa7813)</changelog>
  <changelog author="asn@cryptomilk.org" date="1602590400">- Fix the License</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1604232000">- Add build condition to enable additional options, codecs and
  example binaries.
- Remove rav1e and dav1d support for the moment as still WIP.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608120000">- Updated to version 1.10.0:
  * New API: may access all (vendor-dependent) auxiliary images
    (e.g. hdrgainmap, semanticskinmatte, ...).
  * When ICC profile is present, will now write two color boxes
  (nclx and ICC) into AVIF files. Also reads files with two color
  boxes.
  * Alpha image is now saved as monochrome.
  * Loading of 16bit greyscale PNGs in heif_enc.
  * Deprecated heif_enc option "-E".
  * Remove dependency on alloca().
  * Bug fixes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608206400">- Re-download tarball and check with osc service runall
  download_files, all ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608897600">- Build with dav1d and rav1e support, do this via:
  + Add pkgconfig(dav1d) BuildRequires.
  + Add conditional pkgconfig(rav1e) BuildRequires (currently
    Tumbleweed only).
- Drop libheif-lang Recommends: Package does not exist.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: generate libheif1-32bit, which is a new
  dependency for ImageMagick-32bit after that one now enabled
  libheif support.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- update to 1.11.0:
  * fix writing ispe box in HEIFs
  * nclx output profile encoding parameters
  * change the way nclx profiles is written so that macOS can read them
  * API for listing file brands and checking file type
  * fix heif_image_handle_get_depth_image_representation_info()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1623412800">- Update to version 1.12.0:
  + Check for MIAF conformance and add as compatible brand.
  + Signaling of premultiplied alpha.
  + Parse AV1 obu_sequence_header for av1C box.
  + Write pixi box in AVIFs.
  + Save alpha as monochrome in AVIF if possible.
  + Many build fixes.</changelog>
  <changelog author="sbrabec@suse.com" date="1653652800">- Add missing gdk-pixbuf loader scriptlets (bsc#1199987).</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- security update
- added patches
  fix CVE-2023-0996 [bsc#1208640], buffer overflow in heif_js_decode_image in libheif
  + libheif-CVE-2023-0996.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1683806400">- security update
- added patches
  fix CVE-2023-29659 [bsc#1211174], segfault caused by divide-by-zero
  + libheif-CVE-2023-29659.patch</changelog>
</package>
<package pkgid="839fbe39f7b88c5f5eb983167cea4cf7f11e2b88b5fb4b1219c88381430c097f" name="gdk-pixbuf-loader-libheif" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.11.1"/>
  <changelog author="plinnell@opensuse.org" date="1531051200">- initial package for 1.3.2</changelog>
  <changelog author="asn@cryptomilk.org" date="1602504000">- Only build with AV1-AVIF support
- Update to version 1.9.1
  * https://github.com/strukturag/libheif/releases/tag/v1.9.1
- fixed CVE-2020-23109 [bsc#1192382]
  (bca0162018df9a32d21c05aad1fa203881fa7813)</changelog>
  <changelog author="asn@cryptomilk.org" date="1602590400">- Fix the License</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1604232000">- Add build condition to enable additional options, codecs and
  example binaries.
- Remove rav1e and dav1d support for the moment as still WIP.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608120000">- Updated to version 1.10.0:
  * New API: may access all (vendor-dependent) auxiliary images
    (e.g. hdrgainmap, semanticskinmatte, ...).
  * When ICC profile is present, will now write two color boxes
  (nclx and ICC) into AVIF files. Also reads files with two color
  boxes.
  * Alpha image is now saved as monochrome.
  * Loading of 16bit greyscale PNGs in heif_enc.
  * Deprecated heif_enc option "-E".
  * Remove dependency on alloca().
  * Bug fixes.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1608206400">- Re-download tarball and check with osc service runall
  download_files, all ok.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608897600">- Build with dav1d and rav1e support, do this via:
  + Add pkgconfig(dav1d) BuildRequires.
  + Add conditional pkgconfig(rav1e) BuildRequires (currently
    Tumbleweed only).
- Drop libheif-lang Recommends: Package does not exist.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610107200">- Add baselibs.conf: generate libheif1-32bit, which is a new
  dependency for ImageMagick-32bit after that one now enabled
  libheif support.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- update to 1.11.0:
  * fix writing ispe box in HEIFs
  * nclx output profile encoding parameters
  * change the way nclx profiles is written so that macOS can read them
  * API for listing file brands and checking file type
  * fix heif_image_handle_get_depth_image_representation_info()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1623412800">- Update to version 1.12.0:
  + Check for MIAF conformance and add as compatible brand.
  + Signaling of premultiplied alpha.
  + Parse AV1 obu_sequence_header for av1C box.
  + Write pixi box in AVIFs.
  + Save alpha as monochrome in AVIF if possible.
  + Many build fixes.</changelog>
  <changelog author="sbrabec@suse.com" date="1653652800">- Add missing gdk-pixbuf loader scriptlets (bsc#1199987).</changelog>
  <changelog author="pgajdos@suse.com" date="1677240000">- security update
- added patches
  fix CVE-2023-0996 [bsc#1208640], buffer overflow in heif_js_decode_image in libheif
  + libheif-CVE-2023-0996.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1683806400">- security update
- added patches
  fix CVE-2023-29659 [bsc#1211174], segfault caused by divide-by-zero
  + libheif-CVE-2023-29659.patch</changelog>
</package>
<package pkgid="04f4b2156f9e7c7151e0bf3ef0cde7bc7268f7dfa660ae5e8c4696318e1a12d5" name="gdk-pixbuf-loader-rsvg" arch="aarch64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="7b332fdd756813a4814761b1fa9c74a14d3d71f56c35ea2bc83b54b541948dc4" name="gdk-pixbuf-loader-rsvg" arch="ppc64le">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="774b0d5b63733dda8c7050a03753c410e6634fff39acf326554f061983dbaa13" name="gdk-pixbuf-loader-rsvg" arch="s390x">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="1fa672a22dda335d520c4181185ca070e1942e9904d0373050c54746bf99aae1" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="cc11843163c63703ff34b42fee566043cb5f454f0a2a342f6e502df36acb907a" name="gdk-pixbuf-loader-rsvg-32bit" arch="x86_64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="3da9e19e1c94977b7d3bf041bbe4ee18636bab2fef03d385c65ed818dbe6f85c" name="gdm" arch="aarch64">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="186a8ee9664de2683a60c8f338ee963dd0840cfb980a36a04d9d8f8d7b77e8ac" name="gdm" arch="ppc64le">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="7bcb0a88bee33213b7509de84e34394314714658a2465969f63d6d317e56dac6" name="gdm" arch="s390x">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="d6a28f7709bd5903ca2c9a1a432c52c3ea96ac7cd57bc8cb12913e0fe581e9e1" name="gdm" arch="src">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="56ac1327252f32b5888b9a1cd3d5d4188ab04f13608cb09d9ce309fbc717f34d" name="gdm" arch="x86_64">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="e490475169dec3a36550da99c4d6c6c56a0042b98308efe293a99d2a950f4297" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="ea250c3fe7143bafb1c6f8b835a6fc7a2625558f72fc98693984de57ce77644a" name="gdm-devel" arch="aarch64">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="c6074c713454f549e0566473c4829c7724f9c3b0b49d94e3e25d99963d9ebb81" name="gdm-devel" arch="ppc64le">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="c31f77c5c7e465abb01fa963b535840b2a85429180a0bfe2c3aad4e0a7c16f7a" name="gdm-devel" arch="s390x">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="739af026c062f17db96b7c89ccacf475b4a74e01119e1449540e6f38fcb59505" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="dcbfb307cd92d59fdb7f1f207d66477096ef6c4a43058b24c5d5c01071a143d3" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="59437893dfdd3fd43e09cce7ce67e143bee1143ce7cc5b72fc79a0e4ecc913b0" name="gdm-schema" arch="noarch">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="461f72e005e17489f4d8a05c0d46c9a70539f83036794fe5438d8bddb4bc9298" name="gdm-systemd" arch="noarch">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="da375840034c08e0d8833d52da108325a660e4782f0be5398e1020e536505455" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="41.3" rel="150400.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1627992000">- Rebased gdm-default-wm.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1628683200">- Rebase patches:
  + gdm-s390-not-require-g-s-d_wacom.patch
  + gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 41.alpha:
  + Allow user session to be Wayland even when login screen is
    Xorg.
  + Allow wayland user sessions for single GPU vendor nvidia
    machines.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1630929600">- Update to version 41.rc:
  + Fix fallback to Xorg at login screen.
  + Fix SessionType in AccountService user config.
  + Reuse VT on log out.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1631016000">- Add gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Support to start X under root instead of regular user.
  (bnc#1188912 jsc#SLE-17880).
- Update X11-displaymanager-gdm file.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 41.0:
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1632830400">- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1634040000">- Rebase gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch
  (bsc#1191014).</changelog>
  <changelog author="mwilck@suse.com" date="1634644800">- Add gdm-daemon-Infer-session-type-from-desktop-file.patch
  (bsc#1191809, bsc#1191248)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1637668800">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  With GDM_DISABLE_USER_DISPLAY_SERVER=1 environment variable, make
  X server logging to /var/log/Xorg.*.log and journal log
  (bsc#1192177).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1638964800">- Add gdm-restart-greeter-session-after-crash.patch: When active vt
  is gdm initial vt, restart greeter session. Avoiding the blank
  screen when greeter session crashed
  (bsc#1190230 glgo#GNOME/gdm#735).</changelog>
  <changelog author="simon.vogl@gmx.net" date="1640865600">- Move
  %{_datadir}/glib-2.0/schemas/org.gnome.login-screen.gschema.xml
  from main package to new gdm-schema split package and make
  libgdm1 depend on the new gdm-schema split package. Currently,
  the gdm-schema is required for gnome-shell to work, but
  gnome-shell only depends on libgdm1 and not on gdm as a whole,
  causing a crash of gnome-shell if the gdm main package is not
  installed. By moving the gdm-schema to it's own split package and
  making libgdm1 actually require it, the crash can be prevented.
  Fixes boo#1194183.</changelog>
  <changelog author="dimstar@opensuse.org" date="1641988800">- Update to version 41.3:
  + Juggle Xorg's -listen/-nolisten command line change better.
  + Fix session type selection.
  + Fix crash.
  + Drop vestigial gdm-pin service.
  + XDMCP fixes.
  + Wayland nvidia udev updates.
  + Updated translations.
- Rebase gdm-disable-wayland-on-mgag200-chipsets.patch.
- Drop gdm-daemon-Infer-session-type-from-desktop-file.patch and
  gdm-restart-greeter-session-after-crash.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1645012800">- Use _pam_vendordir instead of _distconfdir/pam.d (boo#1195996).
  AS this means /etc/pam.d on SLE15, we mark those files as
  %config(noreplace).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1647432000">- Add gdm-restart-session-when-X-server-restart.patch:
  Avoiding the blank screen when X server restarts with
  GDM_DISABLE_USER_DISPLAY_SERVER=1 (bsc#1196974).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1657281600">- Add gdm-disable-wayland-on-aspeed-chipsets.patch: Those chips do
  not have fast blending and Wayland performance is bad on them, so
  disable Wayland on aspeed chipsets (bsc#1200323).</changelog>
  <changelog author="yfjiang@suse.com" date="1674043200">- Update gdm-disable-gnome-initial-setup.patch: Refactoring to
  disable it on SLE runtime, so with the same executable it is
  still possible to run on Leap (jsc#PED-1719).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1675166400">- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1685966400">- Add gdm-fix-btmp-record-with-seat.patch: When writing btmp record
  display name is needed, but user don't have a display before
  logging in, this patch uses seat instead which is also better for
  Wayland (bsc#1211825).</changelog>
</package>
<package pkgid="92c13525aa21a3ede97622da7ba9d8ff5d58dae3b19ab4593a012a4d3be65e28" name="geoipupdate" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="61f56f47a0ed2c7a3c02f5dc94141d9986af0f08a5a89d9fc4fd89d42930cc0d" name="geoipupdate" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="a01d91a0856efecda0776b4e22ed41ec881d7af3eba33cbea3abb75ddac8a433" name="geoipupdate" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="c80063eb781ee94afa6d48881123866faefa269a8be544be93eb84845aa38ea2" name="geoipupdate" arch="src">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="f356a0c7422705fb8ae426f7e27b67b692ab7229f839c6582cbdf0f119cc940c" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="8356da613b94a748dff35803697301fea1b07bd46d3835d9ada674227cd8e9ef" name="geoipupdate" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="703de43f07311270499e61e5703cf8f5c8eea81bd4f66b11cae41f7b706b4445" name="geoipupdate" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="45c5dd67f4b2f912322ebcc3b866ae79db28d023633c92dae2c73be41a0aa394" name="geoipupdate" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="01265f328b9805577cbc2bdc117e5709e91e1549c4019b5566f423de85ed046f" name="geoipupdate" arch="src">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="511320445059fec579b6df56d575c0fb0bf91b7dcdb68dade57abea7390c075b" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="3fa1ec4e59dbf4f7fd15f7c2e7aa809ff4e07317dfafc052c53ae8d99c85949d" name="geoipupdate-legacy" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="bc2b230b4be2e2b7c42d44b224c19b4092075047d6343ef1adf0cdfcf0f618d2" name="geoipupdate-legacy" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="1f719f02c46fb0d6bf6151493e3ef810fcf23be3edf44dd188c53a513698aebe" name="geoipupdate-legacy" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="b6eaf8048550faf325a68b0ed23b0d0b03f1fd4e20822d9a6bd77445f7f67993" name="geoipupdate-legacy" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="c2fbe1eaa684aadc1f06415436ff40fa0eb044d2383fe34249daeaebb4bf4c4d" name="geoipupdate-legacy" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="6f7a20cc5f3ca3483f4f3ff4b1bb8347df85f515d5068dbff5307770696cf1db" name="geoipupdate-legacy" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="b4d149d7cd9d1e92fe17fa379585ed43eb38432c72f74bd8a99486ae8a5031ec" name="geoipupdate-legacy" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="f468622451c5a8dd099d26a975fcadd6c5bdb69e26ebfa7894fca1c1e5de8598" name="geoipupdate-legacy" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.12.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="e2a95bc561579d1a692e50e49a6b407c9db4d4d81d1b7c2329d77a62cb2ac73a" name="gettext-its-gtk3" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="9e58042fe453c8a92f5377306e6332060a873658afa91dd4b341f5d1d3f16a9a" name="gettext-its-gtk3" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="2e68928d405a10a797c4774347b8fb05f8494c69f7c21eda0162f1c38a724b82" name="gettext-its-gtk3" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="03bbae3caf24ad4bedb7b76d45ace3210aca7384ec1f445d9422edb66626df77" name="gettext-its-gtk3" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="5d4873f6b4ec7073e2804be441eddefda577f94968ae5f5759e255873ee21b68" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="a2d0b1a672528ef13e6a14dd0aaa1f18eca69e437e8741d3fe5a728ce9625864" name="gfs2-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="80e7a6e4f57bd838ee3f202a82979e59031523f758d129025bc40852ba1ce97a" name="gfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="d66446a5a3bfaf6dc133409b436201bc6c5b2ca841674f5cda3361952f02e84a" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.11.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="6c30d6e425c90a029e4aa308c2f6f46b85cbacfaebe3b43a64175058e4c1c963" name="gfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="7dd29a2b701b07c38bbdee809961853355ea37e2612601b52e79911b3671511a" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="9c2e9c2e8a791c383518590e10663ff6c86682dc8b449a345bd18ad60c38e7f2" name="gfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="5cad96ca4cdfa89c3596ced555d8277d3475e2bb98cfa7e593c259f6198d7840" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.6.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="f25a22b782460b27f2413c699809d07d9b833de3811f02a14777116699bb0295" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="56b25e2b9a5a413073c5efd3150abe86f9eebeabc6f20a4ea29c85488953a711" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="8fc93e80ee9559273433e467e6910d4f4e3b4cb5e951d395fe46b4f90473b338" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="cbceabe0067753e481f789840049d42b378d92804860c77a016e0c4b8c46d2f2" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.12.1"/>
  <changelog author="tiwai@suse.de" date="1689940800">- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f</changelog>
  <changelog author="tiwai@suse.de" date="1689940801">- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1689940802">- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff</changelog>
  <changelog author="tiwai@suse.de" date="1689940803">- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574</changelog>
  <changelog author="tiwai@suse.de" date="1689940804">- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f</changelog>
  <changelog author="tiwai@suse.de" date="1689940805">- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab</changelog>
  <changelog author="tiwai@suse.de" date="1689940806">- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder-&gt;devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397</changelog>
  <changelog author="tiwai@suse.de" date="1689940807">- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99</changelog>
  <changelog author="tiwai@suse.de" date="1689940808">- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f</changelog>
  <changelog author="tiwai@suse.de" date="1689940809">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6</changelog>
  <changelog author="tiwai@suse.de" date="1689940810">- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349</changelog>
  <changelog author="tiwai@suse.de" date="1689940811">- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae</changelog>
  <changelog author="tiwai@suse.de" date="1689940812">- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe</changelog>
  <changelog author="tiwai@suse.de" date="1689940813">- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr-&gt;dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598</changelog>
  <changelog author="tiwai@suse.de" date="1689940814">- Add alt-commit to amdgpu patches
- commit bee21b3</changelog>
  <changelog author="tiwai@suse.de" date="1689940815">- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5</changelog>
  <changelog author="tiwai@suse.de" date="1689940816">- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467</changelog>
  <changelog author="mkoutny@suse.com" date="1689940817">- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc-&gt;connect_lock nesting must be resolved post-merge.
- commit aa5b47d</changelog>
  <changelog author="mkoutny@suse.com" date="1689940818">- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3</changelog>
</package>
<package pkgid="719c34b4c4d9ec80d8965802e3afd590b34cc9bdfa716411f28674324a6e354d" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="bb83f9b57cfeb83711e1d7c3be10e00fe127675913edd53bd81a033e9c4b03ed" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="ac687ab775ff8ab4a82ac32a86ba0fefe23b791f215eb8fcc7a4ee6ff48eedb4" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="0d17753bf4eb8066d14872881b30299735b6b1907e5023d86497a647d008ce5a" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.55.7.1"/>
  <changelog author="jack@suse.cz" date="1688644800">- udf: Define EFSCORRUPTED error code (bsc#1213038).
- commit a788ad0</changelog>
  <changelog author="jack@suse.cz" date="1688644801">- udf: Truncate added extents on failed expansion (bsc#1213039).
- commit 570559c</changelog>
  <changelog author="jack@suse.cz" date="1688644802">- udf: Do not bother merging very long extents (bsc#1213040).
- commit 2bbc059</changelog>
  <changelog author="jack@suse.cz" date="1688644803">- udf: Do not update file length for failed writes to inline files
  (bsc#1213041).
- commit 7c424ea</changelog>
  <changelog author="jack@suse.cz" date="1688644804">- udf: Preserve link count of system files (bsc#1213113).
- commit 796148e</changelog>
  <changelog author="jack@suse.cz" date="1688644805">- udf: Detect system inodes linked into directory hierarchy
  (bsc#1213114).
- commit 94969d9</changelog>
  <changelog author="tiwai@suse.de" date="1688731200">- spi: bcm-qspi: return error if neither hif_mspi nor mspi is
  available (git-fixes).
- dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in
  "compatible" conditional schema (git-fixes).
- phy: tegra: xusb: check return value of devm_kzalloc()
  (git-fixes).
- phy: tegra: xusb: Clear the driver reference in usb-phy dev
  (git-fixes).
- phy: Revert "phy: Remove SOC_EXYNOS4212 dep. from
  PHY_EXYNOS4X12_USB" (git-fixes).
- selftests: mptcp: depend on SYN_COOKIES (git-fixes).
- selftests: mptcp: sockopt: return error if wrong mark
  (git-fixes).
- Documentation: ABI: sysfs-class-net-qmi: pass_through contact
  update (git-fixes).
- docs: networking: Update codeaurora references for rmnet
  (git-fixes).
- Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
- pwm: ab8500: Fix error code in probe() (git-fixes).
- pwm: sysfs: Do not apply state to already disabled PWMs
  (git-fixes).
- pwm: imx-tpm: force 'real_period' to be zero in suspend
  (git-fixes).
- soundwire: qcom: fix storing port config out-of-bounds
  (git-fixes).
- media: cec: i2c: ch7322: also select REGMAP (git-fixes).
- media: atomisp: gmin_platform: fix out_len in
  gmin_get_config_dsm_var() (git-fixes).
- media: venus: helpers: Fix ALIGN() of non power of two
  (git-fixes).
- media: i2c: Correct format propagation for st-mipid02
  (git-fixes).
- media: usb: siano: Fix warning due to null work_func_t function
  pointer (git-fixes).
- media: videodev2.h: Fix struct v4l2_input tuner index comment
  (git-fixes).
- media: usb: Check az6007_read() return value (git-fixes).
- drm/amdgpu: Validate VM ioctl flags (git-fixes).
- Documentation: bonding: fix the doc of peer_notif_delay
  (git-fixes).
- Documentation: timers: hrtimers: Make hybrid union historical
  (git-fixes).
- drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
- commit 50938e1</changelog>
  <changelog author="tiwai@suse.de" date="1688731201">- rtc: efi: Enable SET/GET WAKEUP services as optional
  (bsc#1213116).
- rtc: efi: Add wakeup support (bsc#1213116).
- rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116).
- commit 917e186</changelog>
  <changelog author="ohering@suse.de" date="1688731202">- add mainline tags to five pci_hyperv patches
- commit 6e402f4</changelog>
  <changelog author="jack@suse.cz" date="1688731203">- blacklist.conf: Blacklist b87c7cdf2bed
- commit 6e43578</changelog>
  <changelog author="mhocko@suse.com" date="1688731204">- Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes,
  bsc#1210853).
- commit c3e9aec</changelog>
  <changelog author="jack@suse.cz" date="1688731205">- fixup ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
- commit da8cf7d</changelog>
  <changelog author="msuchanek@suse.de" date="1688731206">- hvcs: Synchronize hotplug remove with port free (bsc#1213134
  ltc#202861).
- hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
- hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
- hvcs: Use driver groups to manage driver attributes (bsc#1213134
  ltc#202861).
- hvcs: Use dev_groups to manage hvcs device attributes
  (bsc#1213134 ltc#202861).
- hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
- commit bcb2fb0</changelog>
  <changelog author="mhocko@suse.com" date="1688731207">- ubi: Fix failure attaching when vid_hdr offset equals to
  (sub)page size (bsc#1210584).
- ubi: ensure that VID header offset + VID header size &lt;= alloc,
  size (bsc#1210584).
- commit d00dadd</changelog>
  <changelog author="tiwai@suse.de" date="1688817600">- ALSA: hda/realtek: Whitespace fix (git-fixes).
- apparmor: fix missing error check for rhashtable_insert_fast
  (git-fixes).
- Revert "drm/amd/display: edp do not add non-edid timings"
  (git-fixes).
- drm/i915/psr: Use hw.adjusted mode when calculating io/fast
  wake times (git-fixes).
- commit 5cd5af9</changelog>
  <changelog author="tiwai@suse.de" date="1688817601">- Fix documentation of panic_on_warn (git-fixes).
- commit d3bc78b</changelog>
  <changelog author="tiwai@suse.de" date="1688817602">- ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
- ALSA: hda/realtek: Amend G634 quirk to enable rear speakers
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
- ALSA: pcm: Fix potential data race at PCM memory allocation
  helpers (git-fixes).
- ALSA: hda: fix a possible null-pointer dereference due to data
  race in snd_hdac_regmap_sync() (git-fixes).
- ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 &amp; Q760
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
- ALSA: fireface: make read-only const array for model names
  static (git-fixes).
- ALSA: oxfw: make read-only const array models static
  (git-fixes).
- commit 588fb29</changelog>
  <changelog author="tiwai@suse.de" date="1688817603">- ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes).
- commit 626f9e0</changelog>
  <changelog author="tiwai@suse.de" date="1688990400">- NTB: ntb_tool: Add check for devm_kcalloc (git-fixes).
- NTB: ntb_transport: fix possible memory leak while
  device_register() fails (git-fixes).
- ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
  (git-fixes).
- NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
  (git-fixes).
- ntb: idt: Fix error handling in idt_pci_driver_init()
  (git-fixes).
- commit e2532ad</changelog>
  <changelog author="mkoutny@suse.com" date="1688990401">- Run scripts/renamepatches for SLE15-SP4
- commit 3002b60</changelog>
</package>
<package pkgid="0f94640da4565815fb5f60794000419ce9184f9ebf03aea0376b26695246b00e" name="gfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.13.5.1"/>
  <changelog author="tbogendoerfer@suse.de" date="1687435200">- net/mlx5: fix missing mutex_unlock in
  mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
- commit f9de2c8</changelog>
  <changelog author="mkoutny@suse.com" date="1687435201">- Refresh patches.suse/x86-mm-use-mm_alloc-in-poking_init.patch.
  To fix build that missed mm_alloc definition.
- commit dcd5af4</changelog>
  <changelog author="jlee@suse.com" date="1687521600">- Update References tag patches.suse/drm-msm-dpu-Add-check-for-pstates.patch
  (git-fixes 1212556 CVE-2023-3220).
- commit 7faa4b1</changelog>
  <changelog author="jlee@suse.com" date="1687521601">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1aef403</changelog>
  <changelog author="jlee@suse.com" date="1687521602">- HID: amd_sfh: Add missing check for dma_alloc_coherent
  (bsc#1212605 CVE-2023-3357).
- commit 1058d70</changelog>
  <changelog author="tiwai@suse.de" date="1687521603">- ieee802154: hwsim: Fix possible memory leaks (git-fixes).
- mmc: usdhi60rol0: fix deferred probing (git-fixes).
- mmc: sunxi: fix deferred probing (git-fixes).
- mmc: sh_mmcif: fix deferred probing (git-fixes).
- mmc: sdhci-spear: fix deferred probing (git-fixes).
- mmc: sdhci-acpi: fix deferred probing (git-fixes).
- mmc: owl: fix deferred probing (git-fixes).
- mmc: omap_hsmmc: fix deferred probing (git-fixes).
- mmc: omap: fix deferred probing (git-fixes).
- mmc: mvsdio: fix deferred probing (git-fixes).
- mmc: mtk-sd: fix deferred probing (git-fixes).
- mmc: bcm2835: fix deferred probing (git-fixes).
- mmc: meson-gx: remove redundant mmc_request_done() call from
  irq context (git-fixes).
- mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
- commit a8d1547</changelog>
  <changelog author="msuchanek@suse.de" date="1687780800">- powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled
  (bsc#1194869).
- powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
  (bsc#1194869 bsc#1212701).
- commit 98497f8</changelog>
  <changelog author="tiwai@suse.de" date="1687780801">- i2c: imx-lpi2c: fix type char overflow issue when calculating
  the clock cycle (git-fixes).
- i2c: qup: Add missing unwind goto in qup_i2c_probe()
  (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
- ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13"
  SSID in the ALC256 (git-fixes).
- ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V
  (git-fixes).
- commit 607c980</changelog>
  <changelog author="msuchanek@suse.de" date="1687780802">- powerpc/set_memory: Avoid spinlock recursion in
  change_page_attr() (bsc#1194869).
- commit c747d4c</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780803">- x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
- commit 958e41f</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780804">- x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
- commit d73721e</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780805">- x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
- commit e8ab3ef</changelog>
  <changelog author="nik.borisov@suse.com" date="1687780806">- x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
- commit 26e74c2</changelog>
  <changelog author="vkarasulli@suse.de" date="1687780807">- Update references in the patch
  patches.suse/HID-intel_ish-hid-Add-check-for-ishtp_dma_tx_map.patch
  (git-fixes bsc#1212606 CVE-2023-3358).
- commit f3ebbc7</changelog>
  <changelog author="msuchanek@suse.de" date="1687780808">- kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
- commit 95a40a6</changelog>
  <changelog author="krisman@suse.de" date="1687780809">- io_uring: fix size calculation when registering buf ring
  (git-fixes).
- commit 4eadbe9</changelog>
  <changelog author="tiwai@suse.de" date="1687867200">- thermal/drivers/sun8i: Fix some error handling paths in
  sun8i_ths_probe() (git-fixes).
- PM: domains: fix integer overflow issues in genpd_parse_state()
  (git-fixes).
- clocksource/drivers/cadence-ttc: Fix memory leak in
  ttc_timer_probe (git-fixes).
- irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
  (git-fixes).
- irqchip/clps711x: Remove unused clps711x_intc_init() function
  (git-fixes).
- irqchip/ftintc010: Mark all function static (git-fixes).
- commit bc06af3</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1687867201">- ice: Fix XDP memory leak when NIC is brought up and down
  (git-fixes).
- ice: block LAN in case of VF to VF offload (git-fixes).
- ice: Reset FDIR counter in FDIR init stage (git-fixes).
- ice: fix wrong fallback logic for FDIR (git-fixes).
- ice: fix invalid check for empty list in
  ice_sched_assoc_vsi_to_agg() (git-fixes).
- ice: add profile conflict check for AVF FDIR (git-fixes).
- ice: Fix DSCP PFC TLV creation (git-fixes).
- ice: copy last block omitted in ice_get_module_eeprom()
  (git-fixes).
- ice: switch: fix potential memleak in ice_add_adv_recipe()
  (git-fixes).
- ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
- ice: Prevent set_channel from changing queues while RDMA active
  (git-fixes).
- ice: config netdev tc before setting queues number (git-fixes).
- ice: Fix ice_xdp_xmit() when XDP TX queue number is not
  sufficient (git-fixes).
- ice: Don't double unplug aux on peer initiated reset
  (git-fixes).
- ice: use bitmap_free instead of devm_kfree (git-fixes).
- ice: xsk: use Rx ring's XDP ring when picking NAPI context
  (git-fixes).
- ice: Ignore EEXIST when setting promisc mode (git-fixes).
- ice: handle E822 generic device ID in PLDM header (git-fixes).
- ice: ethtool: Prohibit improper channel config for DCB
  (git-fixes).
- ice: ethtool: advertise 1000M speeds properly (git-fixes).
- ice: Fix memory corruption in VF driver (git-fixes).
- ice, xsk: Diversify return values from xsk_wakeup call paths
  (git-fixes).
- commit 6a47979</changelog>
  <changelog author="tzimmermann@suse.com" date="1687867202">- Remove patches.suse/0523-of-Create-platform-devices-for-OF-framebuffers.patch (bsc#1212405)
- commit 6d207a1</changelog>
  <changelog author="mgorman@suse.de" date="1688040000">- Refresh -rt config files.
- commit 4ed99b1</changelog>
</package>
<package pkgid="bb96d96daf51f63ccb450c8201e84fc298bf824eb57cfdca7980e382e4382161" name="ghc" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9fcb3b2b5f5a7da640a99fb5caa720a4ff1f4b4f8010feccbf66a75f5dfd7eb7" name="ghc" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d09a773f2a57118e3b98f961a5d4a2f1b0a82a4448d0e2db30ffabc6cabbd8a2" name="ghc" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="557542c59c9e7ada4a7894cb9f835779e189e2727b65bb51f4d2f215413b9711" name="ghc" arch="src">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2641ba6d430b1dcfe0e19c3109e6ef5105a93b16b4bfc89604d892e8efa0edab" name="ghc" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="48759e91fdf7f49b8da5157225c6a24598db34379b107b6eeaca0a255e1f9138" name="ghc-Cabal" arch="aarch64">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="056ec275dc2ebf36313232d7d6ad415d5a9d9b2d04d8b632b0f7051393e57582" name="ghc-Cabal" arch="ppc64le">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="de43a4e0aec26d2aa27fae994ab582413865cf7af659cd83a1e42aebb355c1e4" name="ghc-Cabal" arch="s390x">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="14ab7f570099f393548f0ad4e4b74085582295f853f1a87d8891f0b2fb755280" name="ghc-Cabal" arch="x86_64">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2a0a0df98e22ad51bb11d55821446661104a11858b4010e2322fc60879705f8d" name="ghc-Cabal-devel" arch="aarch64">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="731ab6f6b18d06ea94bef4908e42fb48bde4ae0c7331687cf33852e74fec5820" name="ghc-Cabal-devel" arch="ppc64le">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1baf4b3ff1174c88ac20ab80efd3529deef4f44bffd28dac46873d26cff2bdac" name="ghc-Cabal-devel" arch="s390x">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e93a367a6ca42244c35d62b7f8c76e9fc31c0a8878e67ff971fe30abceed9ccf" name="ghc-Cabal-devel" arch="x86_64">
  <version epoch="0" ver="3.2.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="70ce8a15f99966b9a7465381e1400a83f1b3729d185e6818e7d8df5dff354a15" name="ghc-array" arch="aarch64">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c467518d3863b382b153249b7b2188a9813847ec41d134253ab2c9497f74d76d" name="ghc-array" arch="ppc64le">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9545cfa358e6ff3542e755539bc2f75b686bde8bc5a7761549ccc1b8938024e6" name="ghc-array" arch="s390x">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e897125ec6fdf5de4f7d744e360e35d8d0d573649dd3d9c1cf49d1361c5d4a8a" name="ghc-array" arch="x86_64">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="200ee379269f1b2eb96641ce1cdfb3052976845070d6aea68cdd2a5b5d9e4163" name="ghc-array-devel" arch="aarch64">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="0f42215b4a30f23e797a45410348213ed70b410fe8379e8f95b7d9c734af00da" name="ghc-array-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8076064b7c2ad9eb89809e44548abb731432accb6bb603e5ea10f48d1520cf02" name="ghc-array-devel" arch="s390x">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c7ada25d8641d532ff3f728413ec41cbebee3f712f08b0c20010fa8c7cf9f4fd" name="ghc-array-devel" arch="x86_64">
  <version epoch="0" ver="0.5.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d6ad39b054940f477378cc457f4d33fe3f179c8b5e4e7f9da5ab44c066f13e9a" name="ghc-base" arch="aarch64">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7beeea78995a8702159c9fcb75cd2a8c92a375cd1d630e2fceddb98c34a0899a" name="ghc-base" arch="ppc64le">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="957421b0804348ec4f176b32f16c659446abb85783c89f58fd08b0f9867e319a" name="ghc-base" arch="s390x">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9b2f85a80b7b7adbf1988a0787e9b8c5f9bed3564a2b309c1367021be86c487a" name="ghc-base" arch="x86_64">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e589ff20b221902cc6e941fd4b1c055c494770e813d28d4264c937afb5d7adc8" name="ghc-base-devel" arch="aarch64">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ff84a1503acd1c7394c0ebf24a28a8acacb03fa2a7180222df65fe6ad9482228" name="ghc-base-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2bdc11de2e6b0f8bd9ef22a5a4957a64761d25ca7b877ccbc173c4c8b976b274" name="ghc-base-devel" arch="s390x">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ce35fcdc38d0fc35fc19fc0412de45feff437905f9d0ac584e5f6389ea42dc79" name="ghc-base-devel" arch="x86_64">
  <version epoch="0" ver="4.14.3.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="18cfdcf739dfb800b11ce5d0011c32f3d79d16183c012df7bffdab62c66d702e" name="ghc-binary" arch="aarch64">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="469e1c36038c5419de9ae62c777f82bbdee150d3ff3ee9ae65b02471a2f43f36" name="ghc-binary" arch="ppc64le">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8075b59badcf74939ab56a0f5d8c71047fbba8869fb9aee2290f2b242ba2f407" name="ghc-binary" arch="s390x">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2c36170c1cac03342429900932901cfd9a04461ad1217fb3eae94ddb7de00c63" name="ghc-binary" arch="x86_64">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ab27065f8c84a5716f2f2516c7eb73a5d42a730e9958d8787b0cd744fcceab4b" name="ghc-binary-devel" arch="aarch64">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f4af2f420f0e7b5f58e7ca741b0d24e8198e37ba2e015ab1ba4ecb9f9e67317a" name="ghc-binary-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="58fb178e5ef6b3298d99e08897f0988d0918af40e55add5c5ed20fdc40938773" name="ghc-binary-devel" arch="s390x">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="04f6dd739ef9b74a6a0332b9d772fb673f957183deff77d9ff1d943761de0471" name="ghc-binary-devel" arch="x86_64">
  <version epoch="0" ver="0.8.8.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bd615f1cb0d9838cafcc4aa004e01a4a1b3740fcff464d137b0d305aa2c25480" name="ghc-bytestring" arch="aarch64">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="37f765f3eaa2be225690c88c61808c58ce498e4dbfce3c5558b31e587bd9b576" name="ghc-bytestring" arch="ppc64le">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2f9fbf3548abc4934ef6fd51b0ebca05f86a48a07f8fb69612b3d8d40b87abd7" name="ghc-bytestring" arch="s390x">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d5551e0534260b4642345c02670699bc03386ebcc2ab8addc08c368d2bff32fb" name="ghc-bytestring" arch="x86_64">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="855101695555f70f916c8cd4f93e9aa602f74b53cd7efd96f3bb90c554cf8e48" name="ghc-bytestring-devel" arch="aarch64">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="fc34e0a062ea2f548561b5b0df8d17a95facbcb1098fc409919e40c7bbae449f" name="ghc-bytestring-devel" arch="ppc64le">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e6782a61f6fb30669e55829d221fe1d77b7c0aecdef09f42b1423244d95f4388" name="ghc-bytestring-devel" arch="s390x">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f2a4fa7e18a0c77aea4c7a0bc4a45b58e48f17c8ee759dc5965273c6db86429f" name="ghc-bytestring-devel" arch="x86_64">
  <version epoch="0" ver="0.10.12.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="676c6684581c8f5235bdaf34a3c3c3822f52f3ac9aa637c0948d3729050fbc7a" name="ghc-compiler" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="84fa865b06e51de66d64965a5223b64be01a51c98ea74a9c1edc98bfc3f74873" name="ghc-compiler" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b01ad2e75f0f2c8e35be5b984aefca80acb5879de8b4995fc72a7c757d9f7d36" name="ghc-compiler" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="26d205d41e81d61968aaa9a81ea8f9595c09682b20beb573985466027c54fdc5" name="ghc-compiler" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="92072cb7a87c4888fc7447a68b63a1db4fd94d6aa801c3ba8078a7f49a525fbb" name="ghc-containers" arch="aarch64">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2c72446ecd9ef586ffd63369d7f0101dc59e93cff03ec530668da48a0dfc0e75" name="ghc-containers" arch="ppc64le">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="87553d242413a3a8566ea07389666e32bef2785cdf195ae6d45dd6e5921af37c" name="ghc-containers" arch="s390x">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b9822d2414950cf7e8c75a871472aee1ec3c659dc146b82da9c3ee99c09c652d" name="ghc-containers" arch="x86_64">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="02c1647ab249dd33bf07a36071570fa2d342166abdf3de343ecbfebd82ccb14a" name="ghc-containers-devel" arch="aarch64">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="303b573f61793c598b96e16e63fee682bc25f885fcdba57dd0c873ffcb6634e0" name="ghc-containers-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8386c4f478673555ae7128ddbfeb14b4f8fa41909d60ec1bd5b1a3a5ea42a51d" name="ghc-containers-devel" arch="s390x">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bf0e7338c079952aae035f94b6ea847eaa0f00f697a852fb886d7b89e120fb6c" name="ghc-containers-devel" arch="x86_64">
  <version epoch="0" ver="0.6.5.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6e0557a737db61595629eec3cd7de6e29b871f3f601aa78e72d6c80d01065009" name="ghc-deepseq" arch="aarch64">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bbba1c812037bdb1aa2eed4c8b5549d79a2de7603b516bb5b31d53da05292ea7" name="ghc-deepseq" arch="ppc64le">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="32bc3a10927985387fdb5225f7dabdbe0f126788ef49c809f548a683f9efedef" name="ghc-deepseq" arch="s390x">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7807ca6fc5209836a6455ae340c8cd0f456f019e41face19b90eb3f3de24cb40" name="ghc-deepseq" arch="x86_64">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8c098d79679cd300ed34cea230b0c4d6b1a4a163712d9110ad0d9d8ac115faa7" name="ghc-deepseq-devel" arch="aarch64">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8f420ebcf43b091bb9d99767fb08072377d64acaebf355e177de446380ccbc52" name="ghc-deepseq-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="962fbeb680a33aaf35570a598b7d5ad26403c7c89bda3975a5f4a5502099cb73" name="ghc-deepseq-devel" arch="s390x">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e593967eaf29ff5801c5ca8107eb836df3c0b6ed5944a8562f5f6269a46bd254" name="ghc-deepseq-devel" arch="x86_64">
  <version epoch="0" ver="1.4.4.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d77a60927dd6831d9330730552dc27e9db5d5944e4e6a759b551c4e4ba66289b" name="ghc-directory" arch="aarch64">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="741b3bb6e6ef2041485779384c95d3016bb33fb1582771602622347e85aa2ce1" name="ghc-directory" arch="ppc64le">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="362e0dc8455b14af824e6f89b917e3969f1122dc4f2558d49fd10c834dc99247" name="ghc-directory" arch="s390x">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="98ebb2f3cf4c56d8321f939986b562e33eeed0c633b76da33309a1093abb1d42" name="ghc-directory" arch="x86_64">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="21670b78c39c005bad70ffe249acce9a9c55a268a1594eac88dd3675acb454d1" name="ghc-directory-devel" arch="aarch64">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2614260b0ded7454cc513fc5799edd71263b2a9b7259f2cadcf7b23fa74888e1" name="ghc-directory-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b4c036dbce72e0d50ccd1deda4be685e6466f45be9056aba7d3de4ab61ac2dcd" name="ghc-directory-devel" arch="s390x">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="12068555bf786311362ca2faad102a5b37b1b95789be197ea7fbe2bebde1aab7" name="ghc-directory-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f3ddce48e33143627786e319f512e875e3b85b7ae73aa47a5d926e3c1f24f852" name="ghc-exceptions" arch="aarch64">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="3ed153d979facc030866f4a10188c1e1cf23e54171c00854908c12832e446388" name="ghc-exceptions" arch="ppc64le">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f505b383a1a463eb6f186f01903a50440fa5b59b545d65d9165b0845f5a04168" name="ghc-exceptions" arch="s390x">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="236fdb2ca281c50e664eb4f4af6333589ce9ed9f45cb691c28dde65e7452b9e4" name="ghc-exceptions" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="01418fa6fba22e379bca2124e8f4241f0647c45d47602e8232c21d35ade4dca9" name="ghc-exceptions-devel" arch="aarch64">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="5d6b6537c164766aeed067cb9a94b8ed3d30cbf4a5d27233788127a97994ddcf" name="ghc-exceptions-devel" arch="ppc64le">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="091e1ac55f43f3fedea015fe9e26402d39850c24a5b59f83c9eaa993a3dd5dcd" name="ghc-exceptions-devel" arch="s390x">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ca1c9d2197ab3b04ead584adb521c1014c4dade7e2994bb1c9e7315f843685e5" name="ghc-exceptions-devel" arch="x86_64">
  <version epoch="0" ver="0.10.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="5282e056e40d2acfbc4cfd8676bc8dec197b4a15a548dade6ff594c2686c991e" name="ghc-filepath" arch="aarch64">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8f2afae45c592b0a0b4e3b21fa38d91b7e4dca6fe5f34bf8a06c2f4300ef088c" name="ghc-filepath" arch="ppc64le">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7ac62d3d8f8c9377a828bc537092bd3c66ff0012637b36c9263cf2627c42b856" name="ghc-filepath" arch="s390x">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d775cb48883eccf7f67e1e1d7e88df0f7ff9835d50765600542c3e29925423bf" name="ghc-filepath" arch="x86_64">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8f2b9173bf7dbfba5e23cdc1d88482701929fa1ff48cb9f20efa24c2c7bface6" name="ghc-filepath-devel" arch="aarch64">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="273a17fd0d4d95a542608accaf844a5520a7c7beba39303b6a97b39908e7df1f" name="ghc-filepath-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8a2c23acd9a8471a785815e393bcef0b1445024db978c9d8b6516a8777704628" name="ghc-filepath-devel" arch="s390x">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="68f2712d308dc5666c2105fdd346decf87b8a7affffd392f3d1ad346a47921d0" name="ghc-filepath-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="3c5ff81b36a1d5c90a43aa7e8d62213e3b63fab5365e844ecff4658c72028608" name="ghc-ghc" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c5417dd133cf5953dc3b37c2909fab2813b212aa0aab6fb7cdd3e793cd908c6b" name="ghc-ghc" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1aa202e87d1236692896ed528b22ebba5d7afe866ba42b6cfeb0f075da000de7" name="ghc-ghc" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7cc71a16f6361dd6b88ae880eacd4f0f07e044eef8668e114287ea1cc03b1855" name="ghc-ghc" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1581ec549ea0fdae2246300eeddee8bb93fc7364f443c8ed98af5ef1748b8bed" name="ghc-ghc-boot" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="21fe9917a68d366c8798f1af74cc42f966a345e6ade87dca589ac69f5454fabd" name="ghc-ghc-boot" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="44b2541fd3832a86dbdbd3976432c5261b7f97258cbcecf27368659e50d37981" name="ghc-ghc-boot" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ab2eb637959842675645f20d582825df342b1a9c2fc9bb31e4cb91c434073e9e" name="ghc-ghc-boot" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f57a6a79b1d130435e66c0c1f08e418e8c8e9532a585ab2d03a49710d5ea3540" name="ghc-ghc-boot-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e5b474ce53081b4cfcea7be3b65ec38f115a3996adb087de34fb48e74066b1b2" name="ghc-ghc-boot-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1a84459cc1ad1d243eda76b215b88fc022168fc6dcb7ea9382d045a5ad9be49a" name="ghc-ghc-boot-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="236d50daae22a11f85c04198f9ee075036145759882b92818778d92a6b1ef366" name="ghc-ghc-boot-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7b80b15328442d1ec477e18e1da664874a3605fc54c9877374fda461f2877f7d" name="ghc-ghc-boot-th" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="dd6426f02ceb80fe11ba34e1620e2570111e2b866e3bba7a89625e6ad7bea154" name="ghc-ghc-boot-th" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="390f9917af5e50f79948eb6053da328b3252c5f30df61a6bbc906b7aaecbc6c1" name="ghc-ghc-boot-th" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a0941dadccd7c94087b4052c9b09b6e8cc913e3757ac5778b5437cc7bbaf13d6" name="ghc-ghc-boot-th" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a8c2f6ffaa106070e5299dc90004c7f4c6320f301d116642cc41ba2a0da7319f" name="ghc-ghc-boot-th-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9760870dfbc6aa6f415c3615d77f13426fc809f3b941fc620560a008ff67a242" name="ghc-ghc-boot-th-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1755a4cb3cac32bec02301c748cb3b7d0769e35821381cfd1b5cfe3933fcece7" name="ghc-ghc-boot-th-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6d33dd53402878f30c63e11f81814b47b7b6df33791788704e0d153dc3b8da14" name="ghc-ghc-boot-th-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="98f37f5c25fc630629dde739106605d463e568a27b998bc2b2dcaaebb9f2b07d" name="ghc-ghc-compact" arch="aarch64">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="31790b501416e47a1fd4e837ff36cecbc8cb112bbb2dc44ba12c7d9309000f8c" name="ghc-ghc-compact" arch="ppc64le">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2c2c149a746aa62d30c8de38335be4d865b1c9b5528be47dba4ac8c153067560" name="ghc-ghc-compact" arch="s390x">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f0488880ee044abb01e083e248cfa4e828ae0d384ac3428c8b830c2521738f1b" name="ghc-ghc-compact" arch="x86_64">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b1cc306e1d67ce4729989acc1f300a142148002f7938a61eb06bb632addc5d92" name="ghc-ghc-compact-devel" arch="aarch64">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b9aac54edb0aad7e3a317d27c04ca669844ac45f8b5eded4f35316fe941dd56c" name="ghc-ghc-compact-devel" arch="ppc64le">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2955f3b363b604c1e2dd4b6b55b50f8e7246e9de731a5a4e707d0c798889a618" name="ghc-ghc-compact-devel" arch="s390x">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b054fddff51b18f4d493bbcd3533e229054bcc453248f4dbd110fbe84a7607fa" name="ghc-ghc-compact-devel" arch="x86_64">
  <version epoch="0" ver="0.1.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="875e867cd4da972dc51de29b59d96bec62775bfed72e8f59bf1c1e0f0a469678" name="ghc-ghc-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c9d45a691a322c8184e6f41402e240553a954aa9b60befd0a14395ddf3663537" name="ghc-ghc-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f19876553ebc41046f4c7275004507b2f121c4629ae88f3744d0ed05458d40a9" name="ghc-ghc-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ac5e69b8cf194b2dafea306c1c3f089d42e07722558c131fe0ea348531a75642" name="ghc-ghc-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a9b7766abb24f17677292dec0d722024debf97b8517875bd2dfd6e7558cf9934" name="ghc-ghc-heap" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="24e316d63e1b83bd79d48d916a113c9c69898e37a21909c2928b09b28d7a78a1" name="ghc-ghc-heap" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8747ad4e54f1320faf1c41ad1c425bf845d531afe329df26131c69997b9b412a" name="ghc-ghc-heap" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="0b2d5f712dd8f3a38cdedcc008f69c6fe2bfaca13faf3d5f491bd26e83a364f6" name="ghc-ghc-heap" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="dec89354571f17cfd6140a6645d5f48c6093a1d3f26feeccf23e259950a1798f" name="ghc-ghc-heap-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2c591998c2f62b7a879cfaa27585eae002f3fcc06e51d6c6996f86b99eb1e9bb" name="ghc-ghc-heap-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e4fa0a2929aacb44ca167b2f3b53b397a9e7054c95fd3feb5be6eecbd025dd5c" name="ghc-ghc-heap-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2af620dcfeaec2e05dd6094a19865845530f3eb5c95ce893d60dbab646d89300" name="ghc-ghc-heap-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a412e0ecd7281138b4ac29dd399fa2933ad2a42928c9f9e04e320fd42dd3e9ef" name="ghc-ghci" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a22f40d003b4f0ace625d0eca843ee22a4a539784ae3dc8a89acb1e260848bbd" name="ghc-ghci" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="478421065814bfe58632d585d0a9e2afef189871971d6cd24abf1811f56910c2" name="ghc-ghci" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="32b338d9dbcc9f07722a5ec09b1152bde0ef231c1aea87c44277b21f34a686b6" name="ghc-ghci" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="33a6f5b78b23d8ff6bd9abd77fbe276fe49b007e8aee77decebc264ea714fa0f" name="ghc-ghci-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="620f378aeb1aac669f17b7022d459df2f83829aa899d8a466d92a22b6169c21d" name="ghc-ghci-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bef2f481c0987d919f873a5f62cbc739b2cd4f68ad95b4ba524f13f045b8e4c4" name="ghc-ghci-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4b3886d71d09f4d9af0a4e825c10a15de7d1054de22aaf45254e24416eb819f1" name="ghc-ghci-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bbb0781f31f7720bfc9ed922763182004686c4bcee3cf84091730314488610b4" name="ghc-haskeline" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f1c65f727d13a3fd7669d2485f7b19b66e7bae78c49adf489d818db2e39d65be" name="ghc-haskeline" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2a93b913e7d811082195e5acc4182426f8ec53440a0143d56246712a9947f96b" name="ghc-haskeline" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b2e7475a2eb1152fcf71bb2b8816ad4fcb55a86e00ef590e1b63bd19ae12418c" name="ghc-haskeline" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e538d033d91b7585f8fe0769c6e270bf0a72f45647062826b0098cdae5b3e7d7" name="ghc-haskeline-devel" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4a303e2aae0fa40cfcd85d5e9dfae51a82e410080b057d8a48a4ebfbecf7fd08" name="ghc-haskeline-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c9e79a90587cd2e5e4938f9c05925fa199ae05f9e96c3707d94b7f406e8c3af0" name="ghc-haskeline-devel" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="be47e2cda55f068e80b34b9533f4eaf2196b5414c76a5203c455433b1bf447e5" name="ghc-haskeline-devel" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d00edcfa96d352586c3f35b569425338c01f7979699da97c6c196c4847fe0205" name="ghc-hpc" arch="aarch64">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7231160db75a1a09765644107155d520fac99170955cfc5acf4aa4afac81a300" name="ghc-hpc" arch="ppc64le">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6d00e50351590f135bfb7baef206ac9aab34cea8ae44ee934235dd5f5036c2df" name="ghc-hpc" arch="s390x">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="815d823f93d5621838136495d6f201943953979806d1c48580045a846dc35337" name="ghc-hpc" arch="x86_64">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6abfabc88bffc44de86267c47e23ff5d10e552bf0b809150b4bfac9fb0fd6680" name="ghc-hpc-devel" arch="aarch64">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d00d13aea6681ab8583875ff1ce4431a7889b5c4ed0d23b36d1643a9ed8d8cd6" name="ghc-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4b87c71194d776ee73c8176d90bb8b2ed695a6224a85f1ea2811e9851910ed3c" name="ghc-hpc-devel" arch="s390x">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="36da34de306e55961259b20fb99a6163014b2f3f71303c68801c1aaff9a827eb" name="ghc-hpc-devel" arch="x86_64">
  <version epoch="0" ver="0.6.1.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="eceafe362a818562728f60cd2175c1c31a7853c0a952f07af0c5c6dabc4d35d3" name="ghc-libiserv" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e25c9b3e65f81f371e1a6752b72ba588d4ee2c0e38c248c30103b32b66d6c946" name="ghc-libiserv" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1d39213f9a93a0aacbf078a47ca625a72b2f65db3579c0dedaf7dadff7644a45" name="ghc-libiserv" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="3db20ad1ad3578939355bb7b5d363fcb983a176c150f55e5f6af4d2cde9c19d9" name="ghc-libiserv" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7766ec20e748dcc324309414963fb0686b4f1862a70b74699e40b2356c0195f1" name="ghc-libiserv-devel" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b00534e97bed9c5382be9b9911d5aea75ddc17f5606368754ec1e606874f4532" name="ghc-libiserv-devel" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9bed78cab977ae7e2142da4f472a31bbad469950122c08a13da4560bc025e260" name="ghc-libiserv-devel" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bccb56046434a1fcf9fb112588c3f08585f6517b4d09158deea4335ad0adc09d" name="ghc-libiserv-devel" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b63c3c59be3bf978cbe112323ca4da6fe8b41d26dc343d996b036739cacbf46f" name="ghc-libraries" arch="aarch64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b4cdbea9ab2f6ae3afed688af86150d74482379a2f838d877d84f0c22f7d69d5" name="ghc-libraries" arch="ppc64le">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4aeaee37a6341dbe0d06cdff9a4b5ecf8da1afa9b8ff8bedbb5e66a22e1b585f" name="ghc-libraries" arch="s390x">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2b3cdff1f52163d494ac454ad5dbdc710a52b50d1325349984e9fbfb28c77cdb" name="ghc-libraries" arch="x86_64">
  <version epoch="0" ver="8.10.7" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="38fb806e1e6e45ac1c017a2a6fea7a791c126812340822455dba93096953eddf" name="ghc-mtl" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="81025851fb3d16441a9aa040f406318467812014a2445aee10435ae62dc4d6cc" name="ghc-mtl" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e26d5b9e69aae99cdf86d81e3036bd7b0e43d1ed5c80856632b8e650ddf0ca03" name="ghc-mtl" arch="s390x">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="fa1d3bc0b661eae616ff84124be5b44ff14bc1ac06047ca489f99bba0a07cf6d" name="ghc-mtl" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="634ec2bd0462302271920e40c57f840e2211336640ab1505c7445a975f03c407" name="ghc-mtl-devel" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="432d2fbefde5efef95fbc02f8b682df9f36d53f9e516b094ad49b13df1822990" name="ghc-mtl-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="63361092897eb695b94ed73f43109109ed502735707aba1bf6ee58eda8a1eb65" name="ghc-mtl-devel" arch="s390x">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d9afed66e4a13d43b681bbad4e4185b78e71e59dc18e6032ca2713a0e1c57a82" name="ghc-mtl-devel" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="39d572befdbc12c9bfce9f5f9946a70a510cfe74270e94f86a7c6b4c0b5b50e2" name="ghc-parsec" arch="aarch64">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6fdd66e05c3b2720230460814a459826eaa250bf966c3c3c91d6a2d0e968861d" name="ghc-parsec" arch="ppc64le">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7bf84bba33513266c531e0a1df6dd97fa72997564e065181deafc6e7279fa3cc" name="ghc-parsec" arch="s390x">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d0a687fe815e07d4b198f8ec2d2ab12696532eba5d03a1050de9de2c68b5ead8" name="ghc-parsec" arch="x86_64">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="5a5c94289e6d1e98e11069cf5fc456591a313bfee03194121c91f4755e6d6205" name="ghc-parsec-devel" arch="aarch64">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="cc9807d9256a767b34afd85d94e45ebb194bced4c05537d1cd1459534466288c" name="ghc-parsec-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4845a79c0ff1526e96ca9588aa51380650c1b7b0dd0e04021b9105d896dd5b1c" name="ghc-parsec-devel" arch="s390x">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="cf76a00a90e20bea045952287feb7a8568ca47d634de957dc95fb272e83f4eee" name="ghc-parsec-devel" arch="x86_64">
  <version epoch="0" ver="3.1.14.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a40e7f47198606ce4c5add387629cf1e47bf38771796154a00edf16a2077e179" name="ghc-pretty" arch="aarch64">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ecf692b5ec7bce61efb39621861fac0fb39c07a1a27d96890363fcca78a9889b" name="ghc-pretty" arch="ppc64le">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d56dc94768fcd5b3d83996c4124903c2389ae29f993b537bf333655e107b27f7" name="ghc-pretty" arch="s390x">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4f10ec6a71fede5da538f66c912c75dbfa1ac812ce9b9342ecc83784969fa179" name="ghc-pretty" arch="x86_64">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="17b8a6d74d3672dd23fecab1098eea966c795084e54a2dcbbc74d38209850bf0" name="ghc-pretty-devel" arch="aarch64">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="0bef671d9f92e131930c9f494557518d0ba41cbc5c4588a00f927df345041b6c" name="ghc-pretty-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b5bed80a2534ab962d80e499a19f8591b56c2c45de72c583871128761a13e9d1" name="ghc-pretty-devel" arch="s390x">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4aeff59bccbb46b9db65d790c9b3d44f6f99620b4cc8f58feff3e633cd5c4118" name="ghc-pretty-devel" arch="x86_64">
  <version epoch="0" ver="1.1.3.6" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="dd20bef54158061363dd768c65ef11552b99ab4dd1b61b2f48ce7b25462f4f4a" name="ghc-process" arch="aarch64">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="bb0d3ec8137faf98928b33c0b4c8526483b43b116e02c9f645a4cd775f573c13" name="ghc-process" arch="ppc64le">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2d78b5af65e6e55cfd3917e7d278a9dfe921f9e84489186d321122ef6502bbdf" name="ghc-process" arch="s390x">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="dff1cd64c8694d0d0251609be3863f8e44263297132c8e0ba60205cff7f8310b" name="ghc-process" arch="x86_64">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="79c36601500ba18f2ff972b6733fa7de6a5f7171b7e90f87a22d39acab625f7e" name="ghc-process-devel" arch="aarch64">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="71965e56b0e7242adee6c9dea0cb9ed09e0736395bcde8d6af2f05e8fdeaf8d7" name="ghc-process-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1225d8be4bc6f1922e78dfb8d0f3431f0357247137e675f58771c732bac15f60" name="ghc-process-devel" arch="s390x">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="fa7d47e59ff05e424cf5363cd5dd0376380326860847140930ace5b018bba711" name="ghc-process-devel" arch="x86_64">
  <version epoch="0" ver="1.6.13.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c6685fa9a04fb1ec44faa4a971e0e9a43d3ab72e63d53d78755ee3cfa1ef292b" name="ghc-stm" arch="aarch64">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="23a981ef2ff5be3ea1fbc759768572cfe047b0caf7645b9c1b2424a556f41f07" name="ghc-stm" arch="ppc64le">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a0c788b84bd7e486ae8cb5f4c6583b4b5881e727b6200994ca85117623b21907" name="ghc-stm" arch="s390x">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d7f3c710eca5c7509c942354db4b61d3097b84d5f4c187253e66d41c9d9ed3f6" name="ghc-stm" arch="x86_64">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f976f465a27d13e7af98568174de05071b8c3745bd8f48676f0bc5d86a672548" name="ghc-stm-devel" arch="aarch64">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="291a3c2959da5ce1b2be8a4ffae43c067bbc737108b56133ec2e554b87f50fbe" name="ghc-stm-devel" arch="ppc64le">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f5eba5c6d1dd7092b9ee0681b9b61198b13615c98e744a3b776385c529ede445" name="ghc-stm-devel" arch="s390x">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="045eb70ca3dd0720f0eeed81310351bfbc1079c3800751b24a43d9483171e5cc" name="ghc-stm-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="dee18eb516bb85cbc901b247fc4dfc7867328e69d008e23ed2ae7e841d6f9c1e" name="ghc-template-haskell" arch="aarch64">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2ad1345a5961427ebf3499124611b1e2d8e9facb1d73128f5b4f31abe510791c" name="ghc-template-haskell" arch="ppc64le">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="27282ec39e6bc136595eaa7b20728d1237a897928254669db1e6c79f379a24ff" name="ghc-template-haskell" arch="s390x">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="763f01d3836cc825f7093efca648f07ca8851b5405f7b72c8c752007349da272" name="ghc-template-haskell" arch="x86_64">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="cf971057d95b48cb6ec37c900822cbeccd130902270fd2a14ecd237d6ae65d48" name="ghc-template-haskell-devel" arch="aarch64">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="03b569cad7d14ca9887d0c217ed82368fa56a235a7a5435fc131006311a751ca" name="ghc-template-haskell-devel" arch="ppc64le">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9fc476ea2a3421191f4030b02e8d324e5afd4f9073ef2ecfd54763747234223d" name="ghc-template-haskell-devel" arch="s390x">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a050991beec09224a4da9d8244275c4c64479a367518e04565fc09d7152182f0" name="ghc-template-haskell-devel" arch="x86_64">
  <version epoch="0" ver="2.16.0.0" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1006c37ef26fe94608c66c4fe59a3223108259993efa82662da29d096ce3cd5c" name="ghc-terminfo" arch="aarch64">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b7971d7dca7ec8b0f4caf1959114369936ffa262991edd57d0033d5b1d7ee221" name="ghc-terminfo" arch="ppc64le">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4c5ffedb903f0d956e04557cad60fe24e43898192648c76fc9339c1574e7de9a" name="ghc-terminfo" arch="s390x">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="549d53ba77499ed8ed811d6a4fb8e4e4e99c20676fc2a298713c5550fd2b12df" name="ghc-terminfo" arch="x86_64">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c713ae134eeb7ef7ab339e32119ce59bbbda453781da827fd138e908c1adc671" name="ghc-terminfo-devel" arch="aarch64">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="fcab5e90eeb241b0f400288b50092fadf781adbbc4d6d8503274a3429622b163" name="ghc-terminfo-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4e75e031d266e613c0c7e5ef0ebd7aff3fa62c352f373bd50825982d45afdefa" name="ghc-terminfo-devel" arch="s390x">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="66c03b83026d371d8502fb99816f71547795ba56dccfb501be01cb6912d0f240" name="ghc-terminfo-devel" arch="x86_64">
  <version epoch="0" ver="0.4.1.4" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4de1a62eb6a9a086d2ed2b32ca95e2c8179cbdc3ec834d8660b4ecb690f8be22" name="ghc-text" arch="aarch64">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="29a3b784ae07ddece29211011b8ec97f67e7b939375a88aefc0f74324d511fec" name="ghc-text" arch="ppc64le">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="821a80a8231607a6daced0396192cbfd4d71f882487cbb5563d170e71daf76d7" name="ghc-text" arch="s390x">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8a7351fc4e9f7b66ca73e786cb032df03479f5c7df05aa2bb737bf90a702f8b5" name="ghc-text" arch="x86_64">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="eae50ce4c634faaa6dc1f39236301bf868ebde1c6069b13001243e13b793e7fa" name="ghc-text-devel" arch="aarch64">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="4dc39edea6c7e213a819acb5667ff6d1357f00451b7b79ae31c83f9ec98f4706" name="ghc-text-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="20ae9f52d82f0da08045f778a97ac1378c07f5f3283a36d7b3c93c27ff36de42" name="ghc-text-devel" arch="s390x">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="678e64e4d5cae4c9a09406f7adb5911f788b425a7e94b938ddf24cce2d8eddb0" name="ghc-text-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="937376f255943de951577f23e126495d067adbccbcffa203c706d37fceccfb2f" name="ghc-time" arch="aarch64">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="83f4b5929423c2430a8b55c5c6091e2632f5862e6bfd82221ae621180caac992" name="ghc-time" arch="ppc64le">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="46c9238f812aa44e254ccd93c41307e0655016c17e3882ebc3136734d840805b" name="ghc-time" arch="s390x">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e9009df6b91d35ea1e6e3fb37bde9470b13bfe572d8551298fa5ac495ba8caad" name="ghc-time" arch="x86_64">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="547927ec8520b984d32ab72ebdb85a8f83d7552a2b73d38d2be2db40c0de61b1" name="ghc-time-devel" arch="aarch64">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="9425787a5c3e12560387edc81c00189bca4cea93d18b1cfdef44f534b8575509" name="ghc-time-devel" arch="ppc64le">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="f8c8573e4de461dd392216f820aadf463c98cffe2c04874fc340c34399b2f493" name="ghc-time-devel" arch="s390x">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8cb32e9ff48b4144b6fccbfceca22543bb0a7f77024d4816e69678e9758a9706" name="ghc-time-devel" arch="x86_64">
  <version epoch="0" ver="1.9.3" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="ac303a178640cdbeee09c93c2272f3bd11d1874a041d87600001f41d0b0aeadf" name="ghc-transformers" arch="aarch64">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="99f657ee3393ba298901cd1e57786f8421619142888af462430f3da1c37d6137" name="ghc-transformers" arch="ppc64le">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8125cf4d86449837138c8627a6eabd4a0049be7830591bc244213de9f7d3982f" name="ghc-transformers" arch="s390x">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e371b9d9eeef86df091d76661cc847cee474c72b4dfc28d3f74e84ef171f57b4" name="ghc-transformers" arch="x86_64">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="17185b8eb6357fb57159620e70a1b533e8345c019eed754a9de2d367d16aeb60" name="ghc-transformers-devel" arch="aarch64">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c651e0412af91416e9fc1cce9f2815757197af7020aa287dd74233a6213c35cb" name="ghc-transformers-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="973076a2d9e70fc342a2270e1f367a8b158419b15415f5649373be870bf310bf" name="ghc-transformers-devel" arch="s390x">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a403a00d19dd4ee46987e6f1a53bc8e210bd3111002fd53e43e8ecd9acfee152" name="ghc-transformers-devel" arch="x86_64">
  <version epoch="0" ver="0.5.6.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="fa14d3c283de6fc1759ae1141f59eb0a3265b8e6d5e28ef57cdf0ecb0333b391" name="ghc-unix" arch="aarch64">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="7bf3f374ccd1dab059981cdd5997d8640f2b594836f980cf700609a4a14c896c" name="ghc-unix" arch="ppc64le">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="89eb384106ac9f09a34a8db13cd91c3e328f5e868dfc2ca2fba3c763ccb1c0d3" name="ghc-unix" arch="s390x">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="24e819100489c5cd2a9f8eb263db57f02ec60e8fabb39cc0179e06fb4eae4f26" name="ghc-unix" arch="x86_64">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="3781e5f464b5f7bcb5908048df0bb75e8264faea168a075cf4d18aabdf0ee600" name="ghc-unix-devel" arch="aarch64">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="b2a7943a457c8e33cf017fb00406d24109f50c2c1d19f1fdc504dacdfcbcbc21" name="ghc-unix-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="a75ad4ea0ee7d5cc4ce29d664d226aac18ed8293219dd230ecb3176f68977365" name="ghc-unix-devel" arch="s390x">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="8f65c887646265ed3b24761e03b8ba97e9c36553c43754501f8d3076a68f0285" name="ghc-unix-devel" arch="x86_64">
  <version epoch="0" ver="2.7.2.2" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2491376184001e7dc290d5a6f6786ccd0c46b2fb1a48e7f870a81b893422932e" name="ghc-xhtml" arch="aarch64">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="c013d708fd2dfb787ae6ac52020d895d09741ed7e0aedc27d2649411a5a38abb" name="ghc-xhtml" arch="ppc64le">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="d964e3f8d3d7dc5c64b37df31cc5ea92d82d7bbf2ae3619ab52478791d8f7f35" name="ghc-xhtml" arch="s390x">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2370bc5aeba821a257b3a64c00205fc42176506c6c1de17b40b98bccd783ef66" name="ghc-xhtml" arch="x86_64">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="6a14046ad373e0200230c8a400a8e7deae2ddd32f7b71c5e750999c5d3455a89" name="ghc-xhtml-devel" arch="aarch64">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="2be7f7e96abc0002f1d936ca757400c1b254a58a01a23d0c4f19abac1a02631e" name="ghc-xhtml-devel" arch="ppc64le">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="13151ae4703457f606e34322f2ae0243b48b8d3d8780e6d989473d73183a034f" name="ghc-xhtml-devel" arch="s390x">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="e567f41fd1b750e83b30826600378d4ea5bcefd1658384c8eb56031740a8dde2" name="ghc-xhtml-devel" arch="x86_64">
  <version epoch="0" ver="3000.2.2.1" rel="150500.3.2.5"/>
  <changelog author="ptrommler@icloud.com" date="1579176000">- drop 0001-Fix-check-whether-GCC-supports-__atomic_-builtins.patch
  * fixed upstream
- drop D5212.patch
  * fixed upstream
- drop fix-build-using-unregisterized-v8.4.patch
  * bootstrap compiler is 8.6.5 now
- refresh fix-unregisterised-v8.4-8.6.patch
- clean up spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1579608000">- Update _constraints for aarch64</changelog>
  <changelog author="ptrommler@icloud.com" date="1579780800">- use ghc-bootstrap-helpers on all archs
- lower build env requirements on riscv64
  * make sure we can build on smaller systems
  * adjust parallelism so we don't hog big workers for almost a week
  * many thanks to Stefan Bruens for pointing out the issue and
    helping with the solution</changelog>
  <changelog author="schwab@suse.de" date="1580904000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1581940800">- Increase memory limit for qemu user-space builds</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582804800">- update to 8.8.3
  * a compiler panic due to over-zealous eta reduction
  * the ability to bootstrap with earlier 8.8 releases has been restored
  * the directory submodule has been updated
  * the process submodule has been updated</changelog>
  <changelog author="psimons@suse.com" date="1588852800">- Update ghc to version 8.10.1. Important changes are:
  * The UnliftedNewtypes extension, allowing newtypes to be wrap
    types of kind other than Type.
  * The StandaloneKindSignatures extension, allowing explicit
    signatures on type constructors.
  * A new, low-latency garbage collector for the oldest generation.
  Please refer to the compiler documentation for all details:
  https://downloads.haskell.org/~ghc/8.10.1/docs/html/users_guide/8.10.1-notes.html</changelog>
  <changelog author="mimi.vx@gmail.com" date="1590926400">- cleanup specfile from Leap 42 and older remrants
- drop fix-unregisterised-v8.4-8.6.patch
- drop fix-build-using-unregisterized-v8.4.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596974400">- update to 8.10.2
  * Fixes a code generation bug resulting in incorrect code generation
    for foreign calls with complex arguments
  * Fixes a bug causing object merging to fail when the lld linker is in use
  * Introduces a workaround for a Linux kernel bug in the implementation
    of the timerfd mechanism
  * Fixes a few specialiser regressions as well introduces a variety
    of miscellaneous specialiser improvements
  * Fixes a potential loss of sharing due to left operator sections
  * Fix bootstrapping of GHC with the LLVM backend on x86-64
  * few important correctness fixes for the low-latency garbage collector.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1601726400">- add --enable-unregistered to configure phase on unregistered
  architectures</changelog>
  <changelog author="mimi.vx@gmail.com" date="1602676800">- force multiversion for subpackages</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608465600">- update to 8.10.3
  * More robust support for architectures with weak memory ordering
    guarantees (e.g. modern ARM hardware).
  * GHC can now split dynamic objects to accomodate macOS' RPATH size
    limitation when building large projects (#14444)
  * Several correctness bugs in the new low-latency garbage collector
  * Many, many other bug-fixes))</changelog>
  <changelog author="mimi.vx@gmail.com" date="1612872000">- update to 8.10.4
  * Fix a crash caused by inappropriate garbage of heap-allocated data
    reachable from foreign exports</changelog>
  <changelog author="dmueller@suse.com" date="1615809600">- always build against llvm9, also on SLE15 (suse_version == 1500)
  otherwise the resulting build is not working (llvm is 7.x there) (bsc#1181571)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1624622400">- add 4134.patch to fix build with Sphinx4</changelog>
  <changelog author="mimi.vx@gmail.com" date="1630670400">- update to 8.10.7
- drop 4134.patch and refresh ghc-pie.patch
  * portabilit yfixes
  * Export some RTS symbols required for static builds of GHC
  * Fix LLVM version checking logic so it no longer complains
    about supported LLVM versions.
  * Fix some RTS crashes on Darwin due to mixing up the closure
    sizes of the aarch64 and x86-64 backends.
  * Fix a crash on the non-moving GC due to incorrect logic
    for calculating the header size for array write barries
  * Fix a bug in base leading to a high likelihood of space
    leaks when using lazy bytestrings
  * Fix some timer races in the RTS possibly manifesting in #18033 and #20132
  * Fix a number of bugs affecting the RTS m32 allocator
  * Fix a bug where code may be unloaded prematurely
    when using the parallel garbage collector
  * Fix a bug where the linker may during shutdown unload code before
    libraries’ atexit handlers have a chance to run
  * Improve code layout by distiguishing conditional and unconditional branches
  * Add hs-boot file support for -ddump-minimal-imports
  * Ensure hs-boot files are built before source files in GHCs -M mode
  * Fix a long standing GHC API bug affecting clients like HLS where
    async exceptions used to cancel threads during typechecking would be
    caught by the Template Haskell evaluator and reported as compile errors
  * Improve error messages when looking up packages fails
  * Fix a number of quirks in GC accounting
  * Fix a code generation bug which could result in entry of unlifted
    objects in some programs using unboxed sums
  * Ensure that POSIX signals are not delivered to the ticker thread
    when using the pthread itimer implementation.
  * Fix a specialiser bug which could result in the construction
    of recursive dictionaries in some programs
  * Bump containers to 0.6.4.1
  * Do not treat -Winferred-safe-imports warnings as errors.
  * Fix a bug where typechecker plugins could be run with
    an inconsistent typechecker environment
  * Fix a simplifier bug which lead to an exponential
    blow up and excessive memory usage in certain cases</changelog>
  <changelog author="dmueller@suse.com" date="1646740800">- add ghc-armv7-VFPv3D16--NEON.patch to use vfpv3-d16 on armv7hl</changelog>
  <changelog author="mliska@suse.cz" date="1651233600">- Remove dependency on binutils-gold as the package will be removed
  in the future. Gold linker is unmaintained by the upstream project.</changelog>
  <changelog author="dmueller@suse.com" date="1656331200">- add ghc.keyring to have source validation enabled
- limit to use llvm12 for Factory as newer versions are not supported</changelog>
</package>
<package pkgid="1754370e9bd560a3b82a51773f8aa85fa0023ccdd511d2e3b48878ac68a4292f" name="ghc-xml-conduit" arch="aarch64">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="46c82e2bbe0875589cde8164b669de5928824d1e382cec5b8bcb64473776f8ab" name="ghc-xml-conduit" arch="ppc64le">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="e05ca5e407b33d70a063494267c00219f90d68c02fd70ef07ba0588b3163e314" name="ghc-xml-conduit" arch="s390x">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="a0f21d907267089c227f221f7003b41da18d2308139b8a0ef87e0a9fc599e630" name="ghc-xml-conduit" arch="src">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="520f6dd19ed91d661468488ae2bcc69a2b76e5d12e5015a7ad47badb6c23aa58" name="ghc-xml-conduit" arch="x86_64">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="21037371c8e0e7e1e3763352f61110d6b7994976bc3842d1174b3bdc3bcf7e60" name="ghc-xml-conduit-devel" arch="aarch64">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="c435115eefe119679f276f3797269db57fee8266cf4e8018ebfae83680120ccc" name="ghc-xml-conduit-devel" arch="ppc64le">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="3958665b03dc3677ec22293c103ad12c09e459905515674aaa1e4e9a0cee999c" name="ghc-xml-conduit-devel" arch="s390x">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="4170762abc2d425cc6187b856d804eb5d00e4546ead6b9d40267d627f40d6e1f" name="ghc-xml-conduit-devel" arch="x86_64">
  <version epoch="0" ver="1.9.1.1" rel="150500.3.2.3"/>
  <changelog author="psimons@suse.com" date="1543320000">- Add xml-conduit at version 1.8.0.1.</changelog>
  <changelog author="psimons@suse.com" date="1573214400">- Drop obsolete group attributes.</changelog>
  <changelog author="psimons@suse.com" date="1577620800">- Update xml-conduit to version 1.9.0.0.
  [#]# 1.9.0
  * Remove deprecated functions (`ignoreTag`, `ignoreAllTreesContent`, `takeAllTreesContent`)
  * Rename `parseText'` into `parseText`
  * `takeContent` and `ignoreContent` now cover entities
  * Align behaviour of `take`* and `ignore`* functions</changelog>
  <changelog author="psimons@suse.com" date="1592308800">- Re-generate file with latest version of spec-cleaner.</changelog>
  <changelog author="psimons@suse.com" date="1597752000">- Replace %setup -q with the more modern %autosetup macro.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1608206400">- disable %{ix86} build</changelog>
  <changelog author="psimons@suse.com" date="1614427200">- Update xml-conduit to version 1.9.1.0.
  [#]# 1.9.1
  * `]` characters inside doctype are now correctly handled
  * Entity expansion loops are now detected and avoided
  * Add field `psEntityExpansionSizeLimit` in `ParseSettings` to limit the length of an entity expansion; set to 8192 characters by default</changelog>
  <changelog author="psimons@suse.com" date="1618574400">- Update xml-conduit to version 1.9.1.1.
  [#]# 1.9.1.1
  * Entity declarations with tags inside are now correctly handled
  * Parser now fails gracefully on malformed entity declarations
  * Parameter entity declarations are now ignored</changelog>
  <changelog author="psimons@suse.com" date="1653220800">- Update xml-conduit to version 1.9.1.1 revision 1.
  Upstream has revised the Cabal build instructions on Hackage.</changelog>
</package>
<package pkgid="0cb4a6fbccb5a03cfc7f641d65553f66968d6d03fb82fe54e3b6205a2c759929" name="ghostscript" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="dbd7e1941da26db309dd0595260ed1e8bb383fbaedbfc145505659c7662f9d0a" name="ghostscript" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="b129019a99322cea20fdfcf09968ebe8c84873b4d61b01b19a9253d07f208b09" name="ghostscript" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="5fdb62654f556c860701b6c5530f2f4c1ed3c70533aabefc4cc9861880569080" name="ghostscript" arch="src">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="ff8da57de0a9e61b83b048d18efae74bcf98a417e757d6d24b29e70b6a2f9f01" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="da0b09b17da0d340dc07688964bb406958277fb5b974f69acb16f2c18681d4df" name="ghostscript-devel" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="ce648750f71437c3d339b5e66481b562d87029520a20b451583680ce1aebe52a" name="ghostscript-devel" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="1051b897139e0cdca013790901a373e03abd358ea7acabc449706da8d04aee80" name="ghostscript-devel" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="0d6ca00ed7818a0f3c542d0c0b8cf3f58770b0493a02c7f747d2e048bd7dd7a1" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="2972fb2b4c54b207b41a837edfed24881d25f8af88fda3df481c0e004b449186" name="ghostscript-x11" arch="aarch64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="8710b967025cbf6f127f9949c43b573a5b59ef0f020153dc8d4f3dc0172faf69" name="ghostscript-x11" arch="ppc64le">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="482c81ff3b5c87190021d2304dd345433d9775343350a323c72a8d26dcf47660" name="ghostscript-x11" arch="s390x">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="de38302ba836fb47a867eb0b580f912c39c56ee895215bbc6f8db930e5341673" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.167.1"/>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="werner@suse.de" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="werner@suse.de" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="werner@suse.de" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="werner@suse.de" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: link as position independent executable (bsc#1184123).</changelog>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
</package>
<package pkgid="ef5c9c427ed6b9d4a4fb17d37d405086acfe88862a7a6045945ed760e50282b2" name="glassfish-jax-rs-api" arch="noarch">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="76820c11854d5f05dcd6f7bff981edb66302aef49c4053dc1d590043ec25a10d" name="glassfish-jax-rs-api" arch="src">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="cdb7a33a3b10f233ada7e9f6378e4cd8f2f94c7fadbb342b40e7fda7a4297b9d" name="glassfish-jax-rs-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="02a546ff352407f64335146bf8bec98209e21ed1dbf8da078f68b458cce58235" name="glassfish-jsp-api" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="1518b87bee2bae51f6029d1213482c2840951003e8875f4c318ccba70eaccd76" name="glassfish-jsp-api" arch="src">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="308d355c101956cfd1611c3c9ba391e30323fa3fb7e31e7de0839f35e5df6819" name="glassfish-jsp-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="c7aa4fec8239a5d2f004fd1ef93407d7a2c955422b576cf93d3f06da37e4aaf7" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="f8734dcfa3325a8c3d092f8fbfad3c328e3c3fd419f0c8365d1a36037187680f" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="8ca4bb44c65b8a9dbf5388a29bd6664a4799512489c2370fb6dab7b969160237" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="3167c004b8de80a8521f748ebf7284b402fa3fe41c9187f6ac3f9812549f8fee" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="5e3f0e6f15c7abfcbfed7042576671106885a7058c48a430ec50f5a2e581311d" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="3a0128e7eb3a441158066257358822f7243fbd0d77ecfd702c78637fb7041666" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d3cd15c37dbddfc747c0f2a4f7b53103b12d46755e58b80437870b9219c0dedc" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="3fbb0ce4b26fa2fdebc464419f8aff89fa40238e008ddc3c7de8cbe29e585096" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d888ca2508bd29c516842042d85d303bedab75bb36e6af364df88df4324dc8d5" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="97338ebff0514ca4c02f8b464f056735434288f659154d890920f662339cf890" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="6b651ed777637644b3056d9013a7b56c254b8641c56047b5019f34d082139ffc" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="cc61753eb195d874a900549dafcddd89c7c2760d3424df34b0b35d31f1673d45" name="glibc-devel-static" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="272adf9a4dda04fcb09d95dfc66af3422ba4efc37ef9cb38a109ae02cdf51229" name="glibc-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="fce2230884602cd29d226faced92d606da5cbef559089fc2d9c081c99862d8d0" name="glibc-devel-static" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="1113f0e427e838219ba7f678899d6229ac2f136a27c31f8140e56b6289e308cb" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="9540112799f9091ad1f416681465342ef9a8e2bcffbe6aa78ca945560bfc7443" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="1f4477a5ef40cbf08af9531183766e68a8ce755e660a2d1bfbdb13e264962d23" name="glibc-extra" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="ad9a1181dc26a856c3e1cd0cfbd1a50fbf7c93be237dbd45c906ac1d5f9fc701" name="glibc-extra" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="a5fdcb8e25d6a5d1dc086dfdaf2285f79ce65660e5053d38899305d6f0b9cbbc" name="glibc-extra" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="6322bc3a1e6eddb249565cd6e0442a45b2d8a6c46a373898d11376df54c01ee4" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="6739ee61c9c9df430384d265d1276881adf35eedd5f6c79b3054626338d826e1" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="b165a22d885eeff5e4d759ba847f62af376f0a44e5b901ffd0253553817460d5" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d10eba30a91c30c98466950ffe335100a6b845e546b02057c8cd83759372afc2" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="e9b7fd259506a95195624b916db5abcfa78ce02c3ab92af3092fed4c013543ea" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="1e2b507131b13caee785ee38edfd5c412c597ce247348d8acd88d941782296d3" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="ea62d67b4e968b08ba4dd0b44e36062a563cc4c9d59e564af8a6b6c5260ca949" name="glibc-locale" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7f49648599b77be9b65a153fa3314b92c8f2c6c8aefa3b6c2b678a287d9c6c76" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="bfb9d4b8f540f337eb25334fe7135c5e7833ecc41f6df3f51bebbc505baeaf34" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="fefa3a7eea55faace328e9de1c38d3e5c49fe1dab422056cf34dea50d352741c" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="ec85fe6569250bb3abb9cb870c3285670211f38a738cc27df06152e76690f90c" name="glibc-locale-base" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="923db9afc53eaefccd0da4fcde73eb64bcc01a7809c2f01e39c76c33cf0e41ed" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="4c9ace30652c2dba6d8fd3a183a77a399e49310ced14f3cce5038495e0a019c5" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="9b7a97bb86a67e59192a0092f79162e26b1dd598e42f4d4071d811e10a08eda1" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="12b68c801360218afaa9c0007900fc777c54cc8fd7f2d53a3d5e9878f71e7e49" name="glibc-profile" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7317ad7435ef807797c9ee031653a5acc2668941bed1c0374d3573f0d77c4b9c" name="glibc-profile" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="577b12161bc5f08532386e6504b97c9b59a94086b2a5df55f88f6427bf49f61f" name="glibc-profile" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d1a9b72f3fd323a7fde980d64660cda541e0659934c15310c01fd94a265fd52d" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="b2cc2c9e3ab5bccf774615ba684a45bdd996bfff42591e0dcf8f5f4c69a9e45d" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="2f69b063a12767e0d9acada6af8473e14516d722a2516c5aeaf630640585f2c2" name="glibc-utils" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="8d5717b92d5c0454821c6e189f8e09cc5753205fe485f5cd2b8720728a342b44" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="ca1a7e1c31274f7765724e736327bb4358a25312a354c46c5940d87e6e810d14" name="glibc-utils" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="a807cbe778440d224f5527087e72b2a657f9b6c3267960ae62718d8847267773" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="94464d855ba7c980854f9f82ca6321502d87d5bcaac07a30335a9eef111fd1f0" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7a7e17cf4fcedfb3758509b13d8531525f1e826b5bfadbecfa6291d17613c7f9" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.31" rel="150300.52.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="12b4c4455303191f80eba0faca948fac7796da373f1f911ce510670ab94e1ae3" name="gnome-control-center" arch="aarch64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="a927c75fff008cb1adb4d3eaabdda75fb91df80f46e58537e879fe08ad4f8e6b" name="gnome-control-center" arch="ppc64le">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="b47028624dfd9fff7266ba7fc231923170178cf4751635468cb0870391a992ea" name="gnome-control-center" arch="s390x">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="542d044521172a38b60fd1b56f43ce2a1d7eace4589a1609349994b42543e4d9" name="gnome-control-center" arch="src">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="3b67050a92558a422e3713b2486132942939b9b44a45543644578152e1ea3b74" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="8b63ae15d6f2582220c9df5f41776d6c6a48b9aedf8e3fccf997e2d47d57dcde" name="gnome-control-center-color" arch="aarch64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="7da94b81360a8c1695e9bde0a8077db74bf2ad46e04e9aedbab211e751cad933" name="gnome-control-center-color" arch="ppc64le">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="569659b2b6c222b133238311fddbab540b0528eda850872dc764b3ff8ae17768" name="gnome-control-center-color" arch="s390x">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="efc070ded31992f43a930a167d69e6b518b2ac23c07e624f0f52eeb11bbff170" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="912ed4cd88e8031a41e0a6c8204641398fa7714b11e8c36905e1162e5a261b6e" name="gnome-control-center-devel" arch="aarch64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="7fa262e0203802de1d5481aa741516879bd91556df89b4f2ed01d53c0af720ed" name="gnome-control-center-devel" arch="ppc64le">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="8f93921362d9014edf16c941d9f191c936ecb2f33a34483c53b809e051ac33dd" name="gnome-control-center-devel" arch="s390x">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="d724927dc38e1a04c7ab06e6526b3204488237cdc31a5981a076410ee34fe8cc" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="19da36194fca0a44a74af17a94cef0b77bcc2721eea8f7cd8cb6516f8b547cc8" name="gnome-control-center-goa" arch="aarch64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="01fc87a7b8a8a2b8a4e3f67982c423107a1f6c43ac095d977cb10163739dfac5" name="gnome-control-center-goa" arch="ppc64le">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="5d0221a2472adeda7cf4de6e9822dbf7237ba5db6fca1b8d1b6b38cf08c26c20" name="gnome-control-center-goa" arch="s390x">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="4c61a3eb0754d304e571bb9a648d8309def2c41dafcdcfa6ced739a40e72f4cf" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="a7a61198e964eb87c9c704c26f45a426068c111b0c7d428ae897773cbb0c969c" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="3bd8b1934377387cebfb5e5eae3d6aa6e5b7457debbbbd840f7a6004039a2878" name="gnome-control-center-user-faces" arch="aarch64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="de5bd39b2dc2aa5d4b1f47ea54ae0b2afab3f962d51fb8f9cd55c7a4ad2ffaf5" name="gnome-control-center-user-faces" arch="ppc64le">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="f6ee84fe338bc8a6e40f3e92f287c543c6183c06115f885f7ee9ca518d9fe8c2" name="gnome-control-center-user-faces" arch="s390x">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="b6f861c73bc5f777860afa5c0580ca07f3388fa81f711c8f43b66ff3533611f2" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="41.7" rel="150500.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1613476800">- Update to version 3.38.4:
  + User Accounts:
  - Properly handle claiming errors if we're already claiming.
  - Always call EnrollStop on enrollment complete.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1613995200">- Update to version 40.beta:
  + Various improvements to fingerprint management.
  + Show hardware model and vendor in the About panel.
  + New Keyboard panel design.
  + New power mode selector in the Power panel.
  + About:
  - Show hardware model and vendor.
  - Use os-release to search for the OS logo.
  + Accessibility: Major code cleanup.
  + Display: Try harder to select a good and working scale.
  + Keyboard: Handle input sources.
  + Power:
  - Rearrange battery code to a new widget.
  - Add a new "Power Mode" section.
  + Sharing: Also disable Traker3.
  + Sound: Update mute button icon when volume changes.
  + User Accounts
  - Fix free of constant string
  - Use properly translated fingerprint strings
  - Improve transition to parental controls window
  - Many improvements to fingerprint management
  + Updated translations.
- Drop control-center-complete-SAE-support.patch: fixed upstreaam.
- Drop gnome-control-center-jscSLE16518-update-subprojects-libgvc.patch:
  fixed upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1616068800">- Update to version 40.rc:
  + Location: Wrap label to fit smaller window sizes.
  + Mouse &amp; Touchpad: Allow horizontal scrolling in test page.
  + Network: Fix creation of the netmask widget.
  + Various fixes to the language chooser.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 40.0:
  + Updated translations.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1619438400">- Rebased gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch(bsc#1184098).</changelog>
  <changelog author="yfjiang@suse.com" date="1626696000">- Add versioned BuildRequires to pkgconfig(udisks2):
  * https://gitlab.gnome.org/GNOME/gnome-control-center/-/blob/gnome-40/panels/info-overview/meson.build#L44</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631880000">- Update to version 40.1:
  + About: Don't show GNOME micro version.
  + Location: Fix permission store table and id.
  + Network:
  - Show all IPv6 addresses for an interface.
  - Display IPv6 gateway.
  + Power: Fix D-Bus proxy leak.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631966400">- Update to version 41.beta:
  + Introduce the new Cellular panel.
  + Introduce the new Multitasking panel.
  + About: Fix a crash due to uninitialized variables.
  + Bluetooth: Fix Bluetooth switch transitions.
  + Location: Fix permission store id (again).
  + Power: Polish power profiles section.
- Changes from version 41.alpha:
  + Improve and fix the development Flatpak manifest.
  + Drop dependency on grilo.
  + About:
  - Don't show GNOME micro version number.
  - Look for dark and text distro logo variants.
  + Accessibility: Add "Enable Animations" option.
  + Location: Fix permission store id.
  + Mouse &amp; Touchpad: Update artwork.
  + Online Accounts: Present all online accounts providers at once.
  + Power:
  - Integrate with new power profiles daemon API.
  - Show more information about power profiles.
  - Cleanup some preferences.
  + Updated translations.
- Drop pkgconfig(grilo-0.3) BuildRequires: no longer needed.
- Add pkgconfig(gcr-3) BuildRequires: dependency for the new
  cellular panel.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632052800">- Update to version 41.rc1:
  + Cellular: Various translation fixes.
  + User Accounts: Improve parental controls behavior.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 41.0:
  + Cleanup the development Flatpak manifest.
  + User Accounts: Add parental controls keywords.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632484800">- Add power-profiles-daemon Recommends: Support the new power
  profiles available.
- Refresh patches with quilt.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632657600">- Bring back gnome-control-center-disable-error-message-for-NM.patch
  and rebase it against latest code base(bsc#1190875).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635508800">- Update to version 41.1:
  + Mouse &amp; Touchpad: Avoid cropping illustration.
  + Network: Fix enabling data after APN is set.
  + Power: Use translated strings for power button action
    behaviors.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1636545600">- Add gnome-control-center-fix-autologin-shortcut.patch:
  If we don't add this property for autologin_row, the shortcut to
  toggle the GtkSwitch won't work (bsc#1191887,
  glgo#GNOME/gnome-control-center!1084).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 41.2:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643716800">- Add 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fix build
  with meson 0.61.0 and newer.
- Add 496c719d7b1492b54c34ace648feb3802f34f774.patch: Remove
  duplicate line from .desktop file
- Drop some ancient Provides and Obsoletes that are no longer
  needed: acme, fontilus, themus, control-center2,
  control-center2-devel, gnome-control-center-branding,
  gnome-control-center-branding-openSUSE and
  gnome-control-center-branding-upstream.
- Update our Supplements to current standard.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.4:
  + Drop unused argument for i18n.merge_file() in Meson rules
  + Applications: Set the Icon key in desktop file to a icon that
    exists
  + Display: Do not invert order when constructing modes
  + Network: Show configuration button only for active/connecting
    connections
  + Printers: Fix error cancelling PPD dialog
  + Sound: Clear level bar when stream is empty
  + Updated translations.
- Drop 4f64deb5f1bc7b83fcc4381b7dbbaf71ad4a77c8.patch: Fixed
  upstream.</changelog>
  <changelog author="qkzhu@suse.com" date="1654516800">- Update to version 41.7:
  + Updated translations
  + Cellular
    Remove duplicate line from .desktop
  + Info
    Allow changing "Device Name" by pressing "Enter"
    Remove trailing space after CPU name
  + Keyboard
    Fix crash resetting all keyboard shortcuts
    Fix leaks
  + Network
    Fix saving passwords for non-wifi connections
    Fix critical when opening VPN details page
  + Wacom:
    Fix leaks
- Drop 496c719d7b1492b54c34ace648feb3802f34f774.patch: Fixed
  upstream.</changelog>
  <changelog author="milachew@mail.lv" date="1666094400">- Add gnome-control-center-info-fix-distro-logo.patch: Fix the size
  of logo icon in About system (boo#1200581).</changelog>
</package>
<package pkgid="cfc03970c2d04e0daef5f0d580b8cf593897c3d0c5a37a1cdf3c9bd49350914a" name="go" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3d339e1293afd0cce46f30dac1e3867ce466a59ca72da4e2537a3927c767ee97" name="go" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3bc7d15d8fd28e3b416054033ebaea51d8328cec85767e6d46d4638c0fe0601f" name="go" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3094dc77e3ff3f1d776f20144ca8d102f6f72a1359c20c4088b36ce0cdf43979" name="go" arch="src">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="fc3d348ab6f944cef1e8712e38fe747d7ecae05e8929c671c671deb0e9eb323c" name="go" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="4cb7450e67c4242b28112aad742505e8d2498b48b03537dc479a864afe358609" name="go-doc" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="82a3a934693e39753ee5dbf1020d4719e927992e2a88daec3f1540cce5ab3e7d" name="go-doc" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="963bf49c7030fb723d476c84793b0d74bed5441a384fc73aa16634806dc2c450" name="go-doc" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="803e6ef156c5ba9f1982750918cf291161593fbceeadd963a9d6e912b94b5b1d" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="897e1d8318f6534bacea8c7bff6f4ec728a79c437892b4e547c2af8ea2778531" name="go-race" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="33087e54c0a92c493b17294ef54e4f28412338376fdeeb3b1d79ae1d084a6941" name="go-race" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="cef89778e035a076827f7b81da0faaa94931a7eae2a61166c84628b3d98223e0" name="go-race" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="f69f974ae56f2fba405109bafa95df72338364fbc811b8139a93cd0d135b49d8" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="38c435583dc0f9e3c4647747992f60a392b45cbce38307d5e16f1dd5b0a4cfc4" name="go1.18-openssl" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="81b2d8e4e4c0264897d2b626f8a35a698ab931509b8fb020e8689f62169d8f91" name="go1.18-openssl" arch="ppc64le">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="22f328960948e41b8df62079fffe05754f7e1e859530fad08e7c5dd90f035adf" name="go1.18-openssl" arch="s390x">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="ce6123a58754a4e3292ddcbaad83562d8fc4a8ad27b39d04b92c22deccd6f755" name="go1.18-openssl" arch="src">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="c8321f93bfe59217e159642e87c63a48042903bd884192b97ab7cbbd5dae2b69" name="go1.18-openssl" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="a36b653ea07b1d4d010e187f0cdc104982be1e9701c1ac2e3dcf8d0f3d59e66c" name="go1.18-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="79f6a8f66cebcca922b661844525cd304ed80d1c0a57c61cc1f09ac7cd8e31e9" name="go1.18-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="4d19de13e93dd6da94e269f079e20194f7652300ac85ebacb14f3d6f074cfc41" name="go1.18-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="a36bf55fc153f7de122888d57bea92d5fb2c967afcbcd1d645154969f552ffa1" name="go1.18-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="c7eacc046a55c26d6c9cfb351c8b0aa8d5a071bf5a743445091fab9b4e1515ef" name="go1.18-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="79aefc18c04062d358d6747af89d80e31cee8721e8b7001df0f5aa5874e831ba" name="go1.18-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="2b6c01345227533f9dd90c990f9c32d350cb214a1b1d3f1c532ee5de3873d1c7" name="go1.19" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="00a54eb9b10132b6ccfb6c06d4c350d06c72706b624d1db9d4e1313eefdb6fce" name="go1.19" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="2b1f160dc626f711416b497cab193b6aa1858ef858a882961484c4dc924c803d" name="go1.19" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="88fcf227d35f6169fd3ce6e932bc189721220ce88db1b650116cd6402a098198" name="go1.19" arch="src">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="0f7de36bfebb21186728e6e762f0e9043b1fa66b66f6db9c556636b5d93565b1" name="go1.19" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="6d6b092e8473a310f8432226ab04e25208867b32b62b6208db1d62c1c4c9f343" name="go1.19" arch="aarch64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="047d85a73ca6f0ce09ca1d031136ccd6a56f75ffea6a61a363ff90776f297287" name="go1.19" arch="ppc64le">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="9c4b090d648b3a2cb3e9e4e94b4b4bb073367da40f71c8876e3290e45201a01b" name="go1.19" arch="s390x">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="7acb889401974447263b81ceb4d8aa69e7ae69f2f39095c2198fcdc884580ec3" name="go1.19" arch="src">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="e7880e52a8ade1368e502a6f736a3533c3499048ae8e9361a0fdaa5dd3939e86" name="go1.19" arch="x86_64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="f6615a7dbdfa4cdbcd1379cd76a69368374a5c3caf924137ba7c6faae23f14ac" name="go1.19-doc" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="c0c2a59b5d2ae66d08d0d584d02e70b35344d54ac3eddbf88bf625dd1564f9c9" name="go1.19-doc" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="ade414494c56d7f7c52fe867dd8c7c676778a24ea3388ced6e25764501b945c5" name="go1.19-doc" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="6556afcfaa44e3bbb9fff762135021460baffe51809f7975e7203ab1998d3e4e" name="go1.19-doc" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="b42bf40869bfc9a9590d44c24c5d6f9708af92ad5e1245dfb4ebc40e6a509025" name="go1.19-doc" arch="aarch64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="cd6a528f29a0add23b5ee0b525e22e52fe1346b62045b3c7e58cb5f81b059fe3" name="go1.19-doc" arch="ppc64le">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="70c62f1d1634495bf3b1a94a6c765f1348f5cc44be3a0b54027d6e2850ff837f" name="go1.19-doc" arch="s390x">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="56ba5a259543834276d304b8fefddb9e244877c9499efe43f3e5395f4048dd5c" name="go1.19-doc" arch="x86_64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="94a392d49e4d5795c43c4d372e46618547132ca12492dd5591d3baf26b2f0ae6" name="go1.19-openssl" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="cccd914f6d272db55521c55ae1160d1aaa8df52a882abb7e71dd7277b82dbf18" name="go1.19-openssl" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="309c2d56791210d52b44700df86c6b5f23bec839b3be905c52c5300212344bf9" name="go1.19-openssl" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="2b6473f0c00ea56accbc07b61478a44adacded99756b3b3497f4cea8ce5e3858" name="go1.19-openssl" arch="src">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="b9f3e2fd917ef5bde99120759bffd41fb3e3ee237f602e34d84790f0367227e4" name="go1.19-openssl" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="86bccbf47903173a5a12f56b4416dedc605027b6a9d6e0fde79377bef5890d4b" name="go1.19-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="e5d2bcfb5c4e19ade901124baa38b91233b97abd2affd1818ea9e14f265cd29d" name="go1.19-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="89eb5f0b4bf5f5c6a9fb88c1ca41816825e6388de0c37dd373f70b918a3fcfc4" name="go1.19-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="72093f9a564fcb2a837ac63bbb10f37479ecaa8383c5fe9414bbca51557cc6e4" name="go1.19-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="6988abecd9f94728c4c80b5f709218e311dea6d397f015b4810055b0df4178d6" name="go1.19-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="15b4c39867ea6cb9f7dcd0f586b05101896f8a96e33f2e965d836d8a6f6ce15f" name="go1.19-openssl-race" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="52a7128d4433d485bedd80b0d61b422810fa34718d6c98551def10f0de6ef024" name="go1.19-openssl-race" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="5576bf321d80fcd64b62f16982c42f1e4a95b8bd3c4b238905ab9485ec1625ea" name="go1.19-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="48b636b4e9f96b54eac783448ff5d1c33a3e3eb18514bffb966815f4c5921d4c" name="go1.19-race" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="bba280d5d6701b10b91ff2932cb1f9a1305816a03357ab562a2a0c0336878144" name="go1.19-race" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="dbd6e0fe6505a5b8b69aca6868a823554d7d87f3f43e6d99d4bd74d990250d8b" name="go1.19-race" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="219f89b2f4abae11bed71df19cbaed597e9c318f7230f174c9c6bbdd23c1c1a6" name="go1.19-race" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="ccbc2e384246041f544fd7ac505e38a534433bca3bf5a9f6c583faf92e0da1d6" name="go1.19-race" arch="aarch64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="3b493cd5184c1f7df1366707acce55f4cc7a0a71b3284b018bf67fee2523c276" name="go1.19-race" arch="ppc64le">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="0d6f80b632d0d74e2cd2da6fa6b83c1cfe4241a41c1566f40700aafb9c07efa3" name="go1.19-race" arch="s390x">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="90e43afe0fc5b8352ca8870deb0ec9f1267ef07d0b587a37d14d6d87ca659ca1" name="go1.19-race" arch="x86_64">
  <version epoch="0" ver="1.19.11" rel="150000.1.37.1"/>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.19.11 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to cgo, the cover tool,
  the go command, the runtime, and the go/printer package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29406
  * go#61075 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60351 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60637 cmd/pprof: skip TestDisasm flaky failures on linux/arm64
  * go#60697 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60710 cmd/go: go list -export -e outputs errors to stderr and has non-zero exit code
  * go#60844 runtime: SIGSEGV in race + coverage mode
  * go#60948 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61054 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="20799c93b89a9a03c88009096d8c19f1304b668cca9569ec429116776c1ad79a" name="go1.20" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="517b2fc9b3a933d64f7804c53bb22ab8a212e02876eb8c9d5fbb93c5047820ee" name="go1.20" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="6375cb28dfed5cef665614fc961cbd2afefb4d731abc52f4fcdff6fe8265fe77" name="go1.20" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="bf55c4c91a9f7d003deaae2fb9fd7e0e32a8c5ce1c131e4c03ae037f0b395b12" name="go1.20" arch="src">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="9d557e2c79eb8880306903f086012cbe1cf61db105cea98bb2b2b7b3b7d1949e" name="go1.20" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="d5a7900a1d34728b728d677c450eb685ac88ef4583d6a6e1ac9797fda0a656e4" name="go1.20" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="1681b299b440a2819ec1de08af8cab2b9c8a03da4b61f30c81abbf97f8c57d67" name="go1.20" arch="ppc64le">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="314bde505ac37818799563b3f058d2e2cce0f50d3e2fcacd0c0ce9d49cc89d2b" name="go1.20" arch="s390x">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="5269d7866c65635e7ab934435b26d1355191897233a4d2525b5f61d1f27055c5" name="go1.20" arch="src">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="ba03c17c03ed582bfb1de12493bf2b2c09f70cd88d972c5a94831545b30b9ff4" name="go1.20" arch="x86_64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="d9549c77a6f57ee28d2190e87891afd8bc2881826f3811a1c866e03191f8db94" name="go1.20" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="b79bb1960cbcd95334cb6c63e7975f6991a30468a3b3e40ff8c46d8440523c09" name="go1.20" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="8993e3e5073981edc5f969cd6b763451adef3cc845d9b234e26ebd345c7214c1" name="go1.20" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="189183f5b0260f8d23c42fe99b93f43103effc18a11ec5b9312fe3988c4e752e" name="go1.20" arch="src">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="0b74ae9ec8ca37451976b05847707e25cbaf922c7edf579bf78de6c7b01e9480" name="go1.20" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="159d96dbbf695438b9cf391fca8c2c7117efcbea07c8f2fe78e71beaefa7888e" name="go1.20-doc" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="8efb885eda306409914592c87e1ce79c0847fe72672bdf623b9fc32c92ca15f3" name="go1.20-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="94e67796f5e24bc0752a0d5cba673f663b52982f02b1712081afb642fd1e0d06" name="go1.20-doc" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="648313c15da50f0a6c535bf3d76da0f059ca9ac389b0a43ef761446cd19803dd" name="go1.20-doc" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="69072f7b7e1fabc9ddf1c19e8ab6a9f46955ad0d9bbec055ec0942a77ed2ffcb" name="go1.20-doc" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="a173fbca33edebfd9abb1be35bfd26201490eff6dca06653f4f3d49ee3356b11" name="go1.20-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="20c7915469a3f2bfecc274b932ce9202af897ef0e3b9b6b6b5eaa8988f1e262a" name="go1.20-doc" arch="s390x">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="651c52c30f3f63a4e4730aada6bd421a47d1ce9127e745ec182f3afbfcded7d7" name="go1.20-doc" arch="x86_64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="4378f28c4a6145b53c052efa299f3dc7cce1cf4d6a2eb2618aef6088c004d63f" name="go1.20-doc" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="59ec32d4c756c01dc30e89d30ed0995f5ffab05c180a2635aba7c80bfcff488b" name="go1.20-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="432a7802c0944ad5fec6512ae1a12ad246fd21a84d3164c39792482db2a4e9af" name="go1.20-doc" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="85f00ceb33a6aec5160a3816c1570b1ae7ade41ccb7c62b0eb56c67e1eaab725" name="go1.20-doc" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="3afa49e202dcc8aba641f24972972c8b295e18951e5f8d3df30c642028b43ad0" name="go1.20-openssl" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="ee602a04c2a76eb92eb7d208e174390c97d4be3f62fbb5bc1b6ea27bda70329f" name="go1.20-openssl" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="a5f04480c379bc0cf47fbe55721491519b35abb925ec4211a697a61107b77893" name="go1.20-openssl" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="65a85a91b13b62e87350fc8571d0a05cb34e8a706e87e41d15385fa5992d6bc3" name="go1.20-openssl" arch="src">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="6f2df4ccb1eeec8435e0ea2a9f434c5f48459caecd5bb2540c39ffe8d2a42fe9" name="go1.20-openssl" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="652c0a3e6fedbf0b0ba3b040515156b8e9663d25e069c664fdcfd1c9608e8d5d" name="go1.20-openssl" arch="aarch64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="4a54b36f6c9931f124ad618ce86b6f01ebe73b6150bdb61bbd3066cd348900f0" name="go1.20-openssl" arch="ppc64le">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="087d2321f2eebce5264ecbda508f3a54456973ff43e089a1eda431fa83805661" name="go1.20-openssl" arch="s390x">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="185fb5eb0c003d1ec974a7a2df59938604c1521251a98ba44c964bb1af553c68" name="go1.20-openssl" arch="src">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="caa3cb25e0a4cf45444e885c9f37ec76272d654814cb263e2a43a18bfdead2ce" name="go1.20-openssl" arch="x86_64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="2c9653df4f6c86738101e735f78f27b9cc913cc4deda0b48444e3f67e580bf6f" name="go1.20-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="9618927e02b4958e02ba3e598a6063b0bdaae3bc0d2c234d8c8787f32e86cce4" name="go1.20-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="0614369f8288a9edbadbe52643e87a0d9c8694b90a5e215a082ffdbfd6bee4eb" name="go1.20-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="392deca6703bbf695e9b575aa682b21eb8d985e9e7daa9c0468bb3ea17c7b454" name="go1.20-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="714cfec43cbc9e96578f7dcc672fde4523e3bf92556cea3ed9ac11f91ac5be09" name="go1.20-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="f913a0ffc7420441dffb3f9b056756805fb8fe681227e25e0ade2a51e54eba44" name="go1.20-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="3fd16711befe9a2cf8f67738d271a5b783b64471724ce23e089749b7b9c4c702" name="go1.20-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="8f35953cc54daace11e9f6009487ecb3494c353de3cefcc06aa52e822a9a0930" name="go1.20-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="7d30334db0de7d98b6400c8dd7436e57e8d1181aa10d13c67926d10582c59386" name="go1.20-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="5f149eff93a166db43741316ed9b4949a9ea48a25f7046b6ff6eab8041eee073" name="go1.20-openssl-race" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="42483510cdf9a1f3f8a64d713cc908aae67d13dd6f7ea89599ab47d1de32babc" name="go1.20-openssl-race" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="538c77dcb4266c6a10beb299f6da998ca5487cd75781fbb3d25d7c11783abd6a" name="go1.20-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="9a1eeed101dc4d0676e503af1ccba3bbea86b7c6e2ed5e0482619b56747c87ba" name="go1.20-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="af41520f34c2a5df416679a35a6da27e61fe62cf3c94bf31033e168315b9a4d3" name="go1.20-openssl-race" arch="ppc64le">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="8cff1a4aa484ffc2d17f7a090a3bf94d91c20a5c627d5e1a1d88f1705b8fc1c5" name="go1.20-openssl-race" arch="s390x">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="512f4cdb069cec23fcc9f8fe085f0111cbad840f193c6abbc1660e0eee27f50c" name="go1.20-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.20.6.1" rel="150000.1.8.1"/>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689336000">- Update to version 1.20.6.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.6-1-openssl-fips.</changelog>
</package>
<package pkgid="b6df0ceaefdc90ac0130a18cf26423bacd5f4d02878e75154ccc01a1cc2fb925" name="go1.20-race" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="36dd04c11605d7b8e2dbdfda5c6f6191969dc660e67e311f43a2e2d704f2d9be" name="go1.20-race" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="f887723716431d836581c51d7f8c32ac3f320ab6fab77a8d39572bc535194f3c" name="go1.20-race" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="9ffe9d76e2943561695fe597748cf265f42ae4fda2f3546b84ba1e59161db62d" name="go1.20-race" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="1610e613019f1adc96c7a2263d2dcbe163e25dceac5ed34774838f6c238122d5" name="go1.20-race" arch="aarch64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="cca390c46a1427e5186ca7be04e48e7acab60c3110298e935b14e4cf2f912a1e" name="go1.20-race" arch="ppc64le">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="516bb1440c6f134cce67188567cb9ad3a0d26da4e8aed47ae5b63e18a8baeca7" name="go1.20-race" arch="s390x">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="8cda7e64da40bee67bf67fb14773c275e6bc05371c31c7cda88ce05f206b7fe2" name="go1.20-race" arch="x86_64">
  <version epoch="0" ver="1.20.6" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking.
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
</package>
<package pkgid="5f4020fe9341e93adc3ef57995f51e78387717200496c5a035b66e1dc0e8eef0" name="go1.20-race" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="aab0472cd778e69ec6b5df20c7233ffae54b9a3fd8a8769d476191a3297eb4eb" name="go1.20-race" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="8fd182aa7c02e316a0ba1e0fb5622ebb16a611abf893cf8f269e980386d96334" name="go1.20-race" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="a62598721068233a14439f6184a5b9323abcf84a0e8773631f261088b4d0e54f" name="go1.20-race" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1689076800">- go1.20.6 (released 2023-07-11) includes a security fix to the
  net/http package, as well as bug fixes to the compiler, cgo, the
  cover tool, the go command, the runtime, and the crypto/ecdsa,
  go/build, go/printer, net/mail, and text/template packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29406
  * go#61076 go#60374 boo#1213229 security: fix CVE-2023-29406 net/http: insufficient sanitization of Host header
  * go#60352 cmd/go: go mod tidy introduces ambiguous imports in pruned modules
  * go#60535 runtime: TLS slot index over 64 and crash
  * go#60675 cmd/compile: internal compiler error: out of range for go.shape.int64
  * go#60698 cmd/go: go list fails with submodules which have test-only dependencies
  * go#60744 crypto/ecdsa: P521 ecdsa.Verify panics with malformed message
  * go#60754 cmd/go: panic: LoadImport called with empty package path when listing GOROOT/test/*.go
  * go#60760 runtime: checkdead fires due to suspected race in the Go runtime when GOMAXPROCS=1 on AWS
  * go#60802 text/template: key/value assignment is reversed within range loop
  * go#60845 runtime: SIGSEGV in race + coverage mode
  * go#60849 cmd/go: go test deadlocked without enforcing timeouts when killed with ^C
  * go#60874 net/mail: mail.ReadMessage in 1.20 cannot parse mbox headers
  * go#60875 net/mail: characters allowed in RFC 5322 are invalid while parsing email header
  * go#60927 x/tools/go/analysis/unitchecker: TestVetStdlib failures
  * go#60947 crypto/x509: TestSystemVerify/EKULeafValid fails on LUCI
  * go#60949 runtime: goroutines that stop after calling runtime.RaceDisable break race detector
  * go#61055 runtime: TestWindowsStackMemory flakes on windows-386-2016</changelog>
  <changelog author="jkowalczyk@suse.com" date="1690891200">- go1.20.7 (released 2023-08-01) includes a security fix to the
  crypto/tls package, as well as bug fixes to the assembler and the
  compiler.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29409
  * go#61580 go#61460 boo#1213880 security: fix CVE-2023-29409 crypto/tls: restrict RSA keys in certificates to &lt;= 8192 bits
  * go#61320 cmd/compile: ppc64le: sign extension issue in go 1.21rc2
  * go#61449 net: TestInterfaceArrivalAndDepartureZoneCache is broken on linux-arm64
  * go#61471 cmd/compile: failed to make Go on riscv64 CPU with numa</changelog>
</package>
<package pkgid="42aa63b6700cdd7d15f7005ebffe35f4ee5d96fb056504da418a860f40cae5be" name="golang-github-prometheus-prometheus" arch="aarch64">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8cfaa6d3634db18e09cde832b6c9687289d6379a477d618feb525e74c4d9c818" name="golang-github-prometheus-prometheus" arch="ppc64le">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8ce85e85dff3d93c6301a82c8e288105d3dd9caa1694d18d75b6ab1df7d868a0" name="golang-github-prometheus-prometheus" arch="s390x">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="dfe81fc8539f0b76ba33cf5844c39fd57c8664740ea38af21cbc33ab29fb79bf" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="32a3b96879342a376349a199d4e509b04835fe7701a54b95543c00fbb59b4dc0" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="d03d7185289b8844b08da40721df7b270d568b895f6cf10f779e8b40fdb85e5b" name="golang-github-vpenso-prometheus_slurm_exporter" arch="aarch64">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="3b1e72aa2c3815fbcb1b3f85677b673829d6a41b1e42fe11e42783f1e2e5a755" name="golang-github-vpenso-prometheus_slurm_exporter" arch="ppc64le">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="5b0e72744d704ca11ffa48a57209defcc141d1696e66ddd70e0f2e731bc53a86" name="golang-github-vpenso-prometheus_slurm_exporter" arch="s390x">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="ab6eb9a455d20daa732efa9bce9868c92de2b85c904663f1b7e334abd4d8a2e7" name="golang-github-vpenso-prometheus_slurm_exporter" arch="src">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="9fb65115374107285bc8bf4a9fc92bc0fb6b817711f4b613f06fcf0402c523c9" name="golang-github-vpenso-prometheus_slurm_exporter" arch="x86_64">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="d67ea3cd4e4c178ef5bdb3854aad9a5cddba0165b4623974837d22a583717ed7" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="ebe4b9e63f1163ab44c1251863b15458a3575d1771a60e225b505ab146d3000a" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="4cd4f0cb7cdd70599df7c74706eb3928466639253b9fdeb874324fa371e1ea3b" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="024a98520bb68db94735f2219b64af7c37daadbea295fb2c03363360f917f038" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="2fad5f8c4d15a03cf39a0f8d97e3a132764bc989aba0fefdc6984d9788c8212c" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="bb485aa6682b9c070fe6b5a668b32bb87e610a83de52d96104fdd18ba370e4d2" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="836310d7ee1410f5e328483194d2c9d09851eb31a63a6499164723ba94a157d0" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="a8f30ef7463bd92e19e2292b8c366f813fcc1d48d7f6fb1abc2478cf30f6a90b" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="2b4c29528621b370a82a4418d095bda3095b6c638dcd574233fc218790ee754a" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="61a32553a62401d1ec21b2c478a1fe0bcf059dffe1da0bd8796120fad14daec7" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="8c2338f5e38457349647ba36df0bd2f2e9a50abd9def51682a3519188c695eee" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="2.1" rel="150100.3.12.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
</package>
<package pkgid="cdce21d760a4a9f5e64ff9fc2438c260b85e7fc87a80285ea56bbb1da1d3a4d6" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="2.1" rel="150100.3.12.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
</package>
<package pkgid="adbdb1b7ec6d16fbfce823e0d156d0e124f39eb058854e13c1605e2c56206bbd" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="2.1" rel="150100.3.12.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
</package>
<package pkgid="033cfe43b91c2a2f2f7067ee45c895087acd12d950fe05eb18498d536c0fcd5a" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="2.1" rel="150100.3.12.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
</package>
<package pkgid="0a47920a9a3aa9571d77e7180e5f2debc51e04345893b4eacffe32091c84606b" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="2.1" rel="150100.3.12.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464, bsc#1210465)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689163200">- Update to version 2.0 (bsc#1211516, bsc#1211517)
  + No upstream changelog provided</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1689768000">- Update to version 2.1 (bsc#1213397)
  + No upstream changelog provided</changelog>
</package>
<package pkgid="27ee8c0b9fddb7c613e5f9cad0496983f0c86a28b8b30c395955c2e581eb207c" name="google-guest-agent" arch="aarch64">
  <version epoch="0" ver="20230601.00" rel="150000.1.37.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649851200">- Update to version 20220412.00
  * enable goproxy during build (#163)
- from version 20220321.00
  * enable routes for ipv6 (#160)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651752000">- Update to version 20220429.00
  * Move some functionality to a utils module (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220713.00 (bsc#1202100, bsc#1202101)
  * try restoring module mode (#172)
  * update for golang 1.16 (#171)
- from version 20220614.00
  * Remove log that can break startup scripts (#170)
- from version 20220603.00
  * repeat fix for arm (#169)
  * no authorized keys on debian (#168)
- from version 20220527.00
  * Add authorized keys command to the Windows agent package. (#167)
  * Support for Windows SSH (#164)
- from version 20220523.00
  * restore double slash metadata url (#166)
- from version 20220520.00
  * Support .exe as an option for scripts and refactor runScript (#165)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in post-install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663329600">- Update to version 20220824.00
  * Workload certs (#177)
- from version 20220823.00
  * add members to OWNERS (#178)
  * Expired key tests (#176)
  * correct expired key handling (#175)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220927.00
  * Workload certificate refresh (#182)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221018.00
  * Write workload cert status file (#184)
- from version 20221017.00
  * Update workload_cert permissions (#180)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668600000">- Update to version 20221109.00
  * Validate user key for whitespace chars (#188)
- from version 20221107.00
  * Fix typo with wsfc agent (#189)
- from version 20221104.00
  * Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
  * Add workload cert refresh to preset (#185)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20230112.00
  * Updating logging module so cloud logs are flushed prior to exit (#196)
  * Windows: retry adding MDS route (#194)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230221.00
  * Allow a comment part of a pub ssh key to have an arbitrary format (#198)
    + Split GetUserKey() into two functions: get and validate
    + Correct the name of ValidateUser func as it validates only users
    + Update tests
  * Update OWNERS (#201)
- from version  20230207.00
  * Update OWNERS file (#199)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683806400">- Update to version 20230510.00
  * Fix dependencies after updating go ver to 1.17 (#211)
  * Update Go version (#210)
- from version 20230426.00
  * Fix compilation directives (#207)
- from version 20230403.00
  * Mod update (#205)
  * Update mod: update golang.org/x/net to
    0.8.0 and its dependencies (#204)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686052800">- Update to version 20230601.00 (bsc#1212418, bsc#1212759)
  * Revert "Avoid conflict with automated package updates (#212)" (#214)
  * Don't block google-osconfig-agent (#213)
- from version 20230531.00
  * Avoid conflict with automated package updates (#212)
  * Add a support of TrustedUserCAKeys into sshd configuration (#206)</changelog>
</package>
<package pkgid="ea2568e2aa1b39725418ecf98a3d9acc75c87d261b850772003417c5bf50ebcf" name="google-guest-agent" arch="ppc64le">
  <version epoch="0" ver="20230601.00" rel="150000.1.37.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649851200">- Update to version 20220412.00
  * enable goproxy during build (#163)
- from version 20220321.00
  * enable routes for ipv6 (#160)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651752000">- Update to version 20220429.00
  * Move some functionality to a utils module (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220713.00 (bsc#1202100, bsc#1202101)
  * try restoring module mode (#172)
  * update for golang 1.16 (#171)
- from version 20220614.00
  * Remove log that can break startup scripts (#170)
- from version 20220603.00
  * repeat fix for arm (#169)
  * no authorized keys on debian (#168)
- from version 20220527.00
  * Add authorized keys command to the Windows agent package. (#167)
  * Support for Windows SSH (#164)
- from version 20220523.00
  * restore double slash metadata url (#166)
- from version 20220520.00
  * Support .exe as an option for scripts and refactor runScript (#165)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in post-install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663329600">- Update to version 20220824.00
  * Workload certs (#177)
- from version 20220823.00
  * add members to OWNERS (#178)
  * Expired key tests (#176)
  * correct expired key handling (#175)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220927.00
  * Workload certificate refresh (#182)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221018.00
  * Write workload cert status file (#184)
- from version 20221017.00
  * Update workload_cert permissions (#180)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668600000">- Update to version 20221109.00
  * Validate user key for whitespace chars (#188)
- from version 20221107.00
  * Fix typo with wsfc agent (#189)
- from version 20221104.00
  * Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
  * Add workload cert refresh to preset (#185)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20230112.00
  * Updating logging module so cloud logs are flushed prior to exit (#196)
  * Windows: retry adding MDS route (#194)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230221.00
  * Allow a comment part of a pub ssh key to have an arbitrary format (#198)
    + Split GetUserKey() into two functions: get and validate
    + Correct the name of ValidateUser func as it validates only users
    + Update tests
  * Update OWNERS (#201)
- from version  20230207.00
  * Update OWNERS file (#199)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683806400">- Update to version 20230510.00
  * Fix dependencies after updating go ver to 1.17 (#211)
  * Update Go version (#210)
- from version 20230426.00
  * Fix compilation directives (#207)
- from version 20230403.00
  * Mod update (#205)
  * Update mod: update golang.org/x/net to
    0.8.0 and its dependencies (#204)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686052800">- Update to version 20230601.00 (bsc#1212418, bsc#1212759)
  * Revert "Avoid conflict with automated package updates (#212)" (#214)
  * Don't block google-osconfig-agent (#213)
- from version 20230531.00
  * Avoid conflict with automated package updates (#212)
  * Add a support of TrustedUserCAKeys into sshd configuration (#206)</changelog>
</package>
<package pkgid="f829d318b4f6a64f6af9ae050d6bbed59b762eed209736e3d3098080836bf972" name="google-guest-agent" arch="s390x">
  <version epoch="0" ver="20230601.00" rel="150000.1.37.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649851200">- Update to version 20220412.00
  * enable goproxy during build (#163)
- from version 20220321.00
  * enable routes for ipv6 (#160)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651752000">- Update to version 20220429.00
  * Move some functionality to a utils module (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220713.00 (bsc#1202100, bsc#1202101)
  * try restoring module mode (#172)
  * update for golang 1.16 (#171)
- from version 20220614.00
  * Remove log that can break startup scripts (#170)
- from version 20220603.00
  * repeat fix for arm (#169)
  * no authorized keys on debian (#168)
- from version 20220527.00
  * Add authorized keys command to the Windows agent package. (#167)
  * Support for Windows SSH (#164)
- from version 20220523.00
  * restore double slash metadata url (#166)
- from version 20220520.00
  * Support .exe as an option for scripts and refactor runScript (#165)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in post-install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663329600">- Update to version 20220824.00
  * Workload certs (#177)
- from version 20220823.00
  * add members to OWNERS (#178)
  * Expired key tests (#176)
  * correct expired key handling (#175)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220927.00
  * Workload certificate refresh (#182)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221018.00
  * Write workload cert status file (#184)
- from version 20221017.00
  * Update workload_cert permissions (#180)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668600000">- Update to version 20221109.00
  * Validate user key for whitespace chars (#188)
- from version 20221107.00
  * Fix typo with wsfc agent (#189)
- from version 20221104.00
  * Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
  * Add workload cert refresh to preset (#185)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20230112.00
  * Updating logging module so cloud logs are flushed prior to exit (#196)
  * Windows: retry adding MDS route (#194)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230221.00
  * Allow a comment part of a pub ssh key to have an arbitrary format (#198)
    + Split GetUserKey() into two functions: get and validate
    + Correct the name of ValidateUser func as it validates only users
    + Update tests
  * Update OWNERS (#201)
- from version  20230207.00
  * Update OWNERS file (#199)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683806400">- Update to version 20230510.00
  * Fix dependencies after updating go ver to 1.17 (#211)
  * Update Go version (#210)
- from version 20230426.00
  * Fix compilation directives (#207)
- from version 20230403.00
  * Mod update (#205)
  * Update mod: update golang.org/x/net to
    0.8.0 and its dependencies (#204)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686052800">- Update to version 20230601.00 (bsc#1212418, bsc#1212759)
  * Revert "Avoid conflict with automated package updates (#212)" (#214)
  * Don't block google-osconfig-agent (#213)
- from version 20230531.00
  * Avoid conflict with automated package updates (#212)
  * Add a support of TrustedUserCAKeys into sshd configuration (#206)</changelog>
</package>
<package pkgid="555cacc3118678459b3e86d9648017606474f1a0a2409fca138a604ee5df24c8" name="google-guest-agent" arch="src">
  <version epoch="0" ver="20230601.00" rel="150000.1.37.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649851200">- Update to version 20220412.00
  * enable goproxy during build (#163)
- from version 20220321.00
  * enable routes for ipv6 (#160)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651752000">- Update to version 20220429.00
  * Move some functionality to a utils module (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220713.00 (bsc#1202100, bsc#1202101)
  * try restoring module mode (#172)
  * update for golang 1.16 (#171)
- from version 20220614.00
  * Remove log that can break startup scripts (#170)
- from version 20220603.00
  * repeat fix for arm (#169)
  * no authorized keys on debian (#168)
- from version 20220527.00
  * Add authorized keys command to the Windows agent package. (#167)
  * Support for Windows SSH (#164)
- from version 20220523.00
  * restore double slash metadata url (#166)
- from version 20220520.00
  * Support .exe as an option for scripts and refactor runScript (#165)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in post-install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663329600">- Update to version 20220824.00
  * Workload certs (#177)
- from version 20220823.00
  * add members to OWNERS (#178)
  * Expired key tests (#176)
  * correct expired key handling (#175)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220927.00
  * Workload certificate refresh (#182)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221018.00
  * Write workload cert status file (#184)
- from version 20221017.00
  * Update workload_cert permissions (#180)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668600000">- Update to version 20221109.00
  * Validate user key for whitespace chars (#188)
- from version 20221107.00
  * Fix typo with wsfc agent (#189)
- from version 20221104.00
  * Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
  * Add workload cert refresh to preset (#185)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20230112.00
  * Updating logging module so cloud logs are flushed prior to exit (#196)
  * Windows: retry adding MDS route (#194)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230221.00
  * Allow a comment part of a pub ssh key to have an arbitrary format (#198)
    + Split GetUserKey() into two functions: get and validate
    + Correct the name of ValidateUser func as it validates only users
    + Update tests
  * Update OWNERS (#201)
- from version  20230207.00
  * Update OWNERS file (#199)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683806400">- Update to version 20230510.00
  * Fix dependencies after updating go ver to 1.17 (#211)
  * Update Go version (#210)
- from version 20230426.00
  * Fix compilation directives (#207)
- from version 20230403.00
  * Mod update (#205)
  * Update mod: update golang.org/x/net to
    0.8.0 and its dependencies (#204)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686052800">- Update to version 20230601.00 (bsc#1212418, bsc#1212759)
  * Revert "Avoid conflict with automated package updates (#212)" (#214)
  * Don't block google-osconfig-agent (#213)
- from version 20230531.00
  * Avoid conflict with automated package updates (#212)
  * Add a support of TrustedUserCAKeys into sshd configuration (#206)</changelog>
</package>
<package pkgid="76fcc960a8411deaacfc6f5c41df11734feb06c1e20d13ce2eca2e09bf3d74d1" name="google-guest-agent" arch="x86_64">
  <version epoch="0" ver="20230601.00" rel="150000.1.37.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649851200">- Update to version 20220412.00
  * enable goproxy during build (#163)
- from version 20220321.00
  * enable routes for ipv6 (#160)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651752000">- Update to version 20220429.00
  * Move some functionality to a utils module (#162)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220713.00 (bsc#1202100, bsc#1202101)
  * try restoring module mode (#172)
  * update for golang 1.16 (#171)
- from version 20220614.00
  * Remove log that can break startup scripts (#170)
- from version 20220603.00
  * repeat fix for arm (#169)
  * no authorized keys on debian (#168)
- from version 20220527.00
  * Add authorized keys command to the Windows agent package. (#167)
  * Support for Windows SSH (#164)
- from version 20220523.00
  * restore double slash metadata url (#166)
- from version 20220520.00
  * Support .exe as an option for scripts and refactor runScript (#165)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in post-install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663329600">- Update to version 20220824.00
  * Workload certs (#177)
- from version 20220823.00
  * add members to OWNERS (#178)
  * Expired key tests (#176)
  * correct expired key handling (#175)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220927.00
  * Workload certificate refresh (#182)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221018.00
  * Write workload cert status file (#184)
- from version 20221017.00
  * Update workload_cert permissions (#180)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668600000">- Update to version 20221109.00
  * Validate user key for whitespace chars (#188)
- from version 20221107.00
  * Fix typo with wsfc agent (#189)
- from version 20221104.00
  * Updates to gce-workload-cert-refresh (#186)
- from version 20221025.00
  * Add workload cert refresh to preset (#185)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20230112.00
  * Updating logging module so cloud logs are flushed prior to exit (#196)
  * Windows: retry adding MDS route (#194)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230221.00
  * Allow a comment part of a pub ssh key to have an arbitrary format (#198)
    + Split GetUserKey() into two functions: get and validate
    + Correct the name of ValidateUser func as it validates only users
    + Update tests
  * Update OWNERS (#201)
- from version  20230207.00
  * Update OWNERS file (#199)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683806400">- Update to version 20230510.00
  * Fix dependencies after updating go ver to 1.17 (#211)
  * Update Go version (#210)
- from version 20230426.00
  * Fix compilation directives (#207)
- from version 20230403.00
  * Mod update (#205)
  * Update mod: update golang.org/x/net to
    0.8.0 and its dependencies (#204)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1686052800">- Update to version 20230601.00 (bsc#1212418, bsc#1212759)
  * Revert "Avoid conflict with automated package updates (#212)" (#214)
  * Don't block google-osconfig-agent (#213)
- from version 20230531.00
  * Avoid conflict with automated package updates (#212)
  * Add a support of TrustedUserCAKeys into sshd configuration (#206)</changelog>
</package>
<package pkgid="fcda2f59cb6858e8ce140a9006cc1b96ebfeda3348ee58b5d586505aa84cd3d2" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20230706.02" rel="150000.1.30.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647518400">- Update to version 20220314.01
  * Support COS on arm64 (#426)
- from version 20220314.00
  * Fix previous PR: exec.CommandContext cannot be reused (#425)
- from version 20220304.00
  * Update the error message when an exec task is run on Windows
    without an interpreter (#423)
  * Fix string that apt-get returns when requiring downgrade (#422)
  * e2e_tests: fix patch test rerun (#421)
  * Add --allow-downgrades flag to apt-get calls when it
    fails because of wanting to downgrade a package (#418)
  * Create e2e test that runs apt-get in a state that makes
    it downgrade a package (#420)
  * e2e_tests: update OS targets, adjust retries (#419)
  * Create change_group.yaml (#416)
- from version 20220215.00
  * Add regex support to package exclusion in OS Patch (#415)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220801.00 (bsc#1202100, bsc#1202101)
  * update OWNERS (#438)
  * Close client when RegisterAgent fails. (#436)
- from version 20220714.00
  * Add timeouts for pip/gem updates. (#433)
- from version 20220623.00
  * upgrade to golang 1.16 and override deb build settings for compatibility (#432)
- from version 20220606.00
  * new example policy to ensure sshd is running on windows VMs (#430)
- from version 20220531.00
  * Add default timeout for pip and gem list commands (#429)
- Don't restart daemon on package upgrade, create a state file instead (bsc#1194319)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashim in post install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1662552000">- Use install command in %post section to create state file (bsc#1202826)
- Remove useless creation of state file directory in /var/lib</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220829.00
  * Fix exclude packages field processing (#440)
- from version 20220824.00
  * Check for exclusive patches. (#442)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221013.01
  * Don't print raw pointer data. (#446)
- from version 20221013.00
  * Delete yum transaction files if created. (#445)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20221214.00
  * Close clients that are not passed anywhere (#450)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230222.00
  * Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
  * Update OWNERS (#458)
- from version 20230208.00
  * Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
  * Update owners file. (#455)
- from version 20230123.00
  * Call FQDN (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688731200">- Update to version 20230706.02 (bsc#1212418, bsc#1212759)
  * Update go version in go.mod (#479)
- from version 20230706.01
  * Fix condition to have 10 attempts rather than 11. (#477)
- from version 20230706.00
  * Remove tests for Ubuntu 18.04 (EOL) (#476)
- from version 20230605.00
  * Update old SLES images paths (#475)
- from version 20230602.00
  * Adding what exit codes mean for OS Config policy (#474)
- from version 20230504.00
  * Set DEBIAN_FRONTEND=noninteractive for apt-get (#472)
- from version 20230403.00
  * Disable repos clean-up (#471)
- from version 20230330.00
  * Revert "Call FQDN (#454)" (#470)
- from version 20230327.00
  * support new format of zypper patch (#469)
  * Fix comparing exec.Cmd in mock on Go1.20
- from version 20230316.00
  * Remove old images from e2e tests image list
- from version 20230227.01
  * Update dependencies (#466)
- from version 20230227.00
  * Bump golang.org/x/sys from 0.0.0-20210923061019-b8560ed6a9b7 to 0.1.0 (#463)</changelog>
</package>
<package pkgid="594d20199b6840b7bed49adfd9297398305d17d8dfc553cb8c438d97c3948b1e" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20230706.02" rel="150000.1.30.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647518400">- Update to version 20220314.01
  * Support COS on arm64 (#426)
- from version 20220314.00
  * Fix previous PR: exec.CommandContext cannot be reused (#425)
- from version 20220304.00
  * Update the error message when an exec task is run on Windows
    without an interpreter (#423)
  * Fix string that apt-get returns when requiring downgrade (#422)
  * e2e_tests: fix patch test rerun (#421)
  * Add --allow-downgrades flag to apt-get calls when it
    fails because of wanting to downgrade a package (#418)
  * Create e2e test that runs apt-get in a state that makes
    it downgrade a package (#420)
  * e2e_tests: update OS targets, adjust retries (#419)
  * Create change_group.yaml (#416)
- from version 20220215.00
  * Add regex support to package exclusion in OS Patch (#415)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220801.00 (bsc#1202100, bsc#1202101)
  * update OWNERS (#438)
  * Close client when RegisterAgent fails. (#436)
- from version 20220714.00
  * Add timeouts for pip/gem updates. (#433)
- from version 20220623.00
  * upgrade to golang 1.16 and override deb build settings for compatibility (#432)
- from version 20220606.00
  * new example policy to ensure sshd is running on windows VMs (#430)
- from version 20220531.00
  * Add default timeout for pip and gem list commands (#429)
- Don't restart daemon on package upgrade, create a state file instead (bsc#1194319)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashim in post install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1662552000">- Use install command in %post section to create state file (bsc#1202826)
- Remove useless creation of state file directory in /var/lib</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220829.00
  * Fix exclude packages field processing (#440)
- from version 20220824.00
  * Check for exclusive patches. (#442)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221013.01
  * Don't print raw pointer data. (#446)
- from version 20221013.00
  * Delete yum transaction files if created. (#445)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20221214.00
  * Close clients that are not passed anywhere (#450)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230222.00
  * Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
  * Update OWNERS (#458)
- from version 20230208.00
  * Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
  * Update owners file. (#455)
- from version 20230123.00
  * Call FQDN (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688731200">- Update to version 20230706.02 (bsc#1212418, bsc#1212759)
  * Update go version in go.mod (#479)
- from version 20230706.01
  * Fix condition to have 10 attempts rather than 11. (#477)
- from version 20230706.00
  * Remove tests for Ubuntu 18.04 (EOL) (#476)
- from version 20230605.00
  * Update old SLES images paths (#475)
- from version 20230602.00
  * Adding what exit codes mean for OS Config policy (#474)
- from version 20230504.00
  * Set DEBIAN_FRONTEND=noninteractive for apt-get (#472)
- from version 20230403.00
  * Disable repos clean-up (#471)
- from version 20230330.00
  * Revert "Call FQDN (#454)" (#470)
- from version 20230327.00
  * support new format of zypper patch (#469)
  * Fix comparing exec.Cmd in mock on Go1.20
- from version 20230316.00
  * Remove old images from e2e tests image list
- from version 20230227.01
  * Update dependencies (#466)
- from version 20230227.00
  * Bump golang.org/x/sys from 0.0.0-20210923061019-b8560ed6a9b7 to 0.1.0 (#463)</changelog>
</package>
<package pkgid="74847977a4558fb5cddad44cc94c4b8f8c145d6d22d6ad76890220796df067f5" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20230706.02" rel="150000.1.30.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647518400">- Update to version 20220314.01
  * Support COS on arm64 (#426)
- from version 20220314.00
  * Fix previous PR: exec.CommandContext cannot be reused (#425)
- from version 20220304.00
  * Update the error message when an exec task is run on Windows
    without an interpreter (#423)
  * Fix string that apt-get returns when requiring downgrade (#422)
  * e2e_tests: fix patch test rerun (#421)
  * Add --allow-downgrades flag to apt-get calls when it
    fails because of wanting to downgrade a package (#418)
  * Create e2e test that runs apt-get in a state that makes
    it downgrade a package (#420)
  * e2e_tests: update OS targets, adjust retries (#419)
  * Create change_group.yaml (#416)
- from version 20220215.00
  * Add regex support to package exclusion in OS Patch (#415)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220801.00 (bsc#1202100, bsc#1202101)
  * update OWNERS (#438)
  * Close client when RegisterAgent fails. (#436)
- from version 20220714.00
  * Add timeouts for pip/gem updates. (#433)
- from version 20220623.00
  * upgrade to golang 1.16 and override deb build settings for compatibility (#432)
- from version 20220606.00
  * new example policy to ensure sshd is running on windows VMs (#430)
- from version 20220531.00
  * Add default timeout for pip and gem list commands (#429)
- Don't restart daemon on package upgrade, create a state file instead (bsc#1194319)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashim in post install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1662552000">- Use install command in %post section to create state file (bsc#1202826)
- Remove useless creation of state file directory in /var/lib</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220829.00
  * Fix exclude packages field processing (#440)
- from version 20220824.00
  * Check for exclusive patches. (#442)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221013.01
  * Don't print raw pointer data. (#446)
- from version 20221013.00
  * Delete yum transaction files if created. (#445)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20221214.00
  * Close clients that are not passed anywhere (#450)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230222.00
  * Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
  * Update OWNERS (#458)
- from version 20230208.00
  * Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
  * Update owners file. (#455)
- from version 20230123.00
  * Call FQDN (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688731200">- Update to version 20230706.02 (bsc#1212418, bsc#1212759)
  * Update go version in go.mod (#479)
- from version 20230706.01
  * Fix condition to have 10 attempts rather than 11. (#477)
- from version 20230706.00
  * Remove tests for Ubuntu 18.04 (EOL) (#476)
- from version 20230605.00
  * Update old SLES images paths (#475)
- from version 20230602.00
  * Adding what exit codes mean for OS Config policy (#474)
- from version 20230504.00
  * Set DEBIAN_FRONTEND=noninteractive for apt-get (#472)
- from version 20230403.00
  * Disable repos clean-up (#471)
- from version 20230330.00
  * Revert "Call FQDN (#454)" (#470)
- from version 20230327.00
  * support new format of zypper patch (#469)
  * Fix comparing exec.Cmd in mock on Go1.20
- from version 20230316.00
  * Remove old images from e2e tests image list
- from version 20230227.01
  * Update dependencies (#466)
- from version 20230227.00
  * Bump golang.org/x/sys from 0.0.0-20210923061019-b8560ed6a9b7 to 0.1.0 (#463)</changelog>
</package>
<package pkgid="b1e5d0d165f3ad2f8d402f8153e19ab6db48df972bb0d9787efd87d4dc6433b4" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20230706.02" rel="150000.1.30.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647518400">- Update to version 20220314.01
  * Support COS on arm64 (#426)
- from version 20220314.00
  * Fix previous PR: exec.CommandContext cannot be reused (#425)
- from version 20220304.00
  * Update the error message when an exec task is run on Windows
    without an interpreter (#423)
  * Fix string that apt-get returns when requiring downgrade (#422)
  * e2e_tests: fix patch test rerun (#421)
  * Add --allow-downgrades flag to apt-get calls when it
    fails because of wanting to downgrade a package (#418)
  * Create e2e test that runs apt-get in a state that makes
    it downgrade a package (#420)
  * e2e_tests: update OS targets, adjust retries (#419)
  * Create change_group.yaml (#416)
- from version 20220215.00
  * Add regex support to package exclusion in OS Patch (#415)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220801.00 (bsc#1202100, bsc#1202101)
  * update OWNERS (#438)
  * Close client when RegisterAgent fails. (#436)
- from version 20220714.00
  * Add timeouts for pip/gem updates. (#433)
- from version 20220623.00
  * upgrade to golang 1.16 and override deb build settings for compatibility (#432)
- from version 20220606.00
  * new example policy to ensure sshd is running on windows VMs (#430)
- from version 20220531.00
  * Add default timeout for pip and gem list commands (#429)
- Don't restart daemon on package upgrade, create a state file instead (bsc#1194319)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashim in post install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1662552000">- Use install command in %post section to create state file (bsc#1202826)
- Remove useless creation of state file directory in /var/lib</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220829.00
  * Fix exclude packages field processing (#440)
- from version 20220824.00
  * Check for exclusive patches. (#442)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221013.01
  * Don't print raw pointer data. (#446)
- from version 20221013.00
  * Delete yum transaction files if created. (#445)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20221214.00
  * Close clients that are not passed anywhere (#450)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230222.00
  * Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
  * Update OWNERS (#458)
- from version 20230208.00
  * Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
  * Update owners file. (#455)
- from version 20230123.00
  * Call FQDN (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688731200">- Update to version 20230706.02 (bsc#1212418, bsc#1212759)
  * Update go version in go.mod (#479)
- from version 20230706.01
  * Fix condition to have 10 attempts rather than 11. (#477)
- from version 20230706.00
  * Remove tests for Ubuntu 18.04 (EOL) (#476)
- from version 20230605.00
  * Update old SLES images paths (#475)
- from version 20230602.00
  * Adding what exit codes mean for OS Config policy (#474)
- from version 20230504.00
  * Set DEBIAN_FRONTEND=noninteractive for apt-get (#472)
- from version 20230403.00
  * Disable repos clean-up (#471)
- from version 20230330.00
  * Revert "Call FQDN (#454)" (#470)
- from version 20230327.00
  * support new format of zypper patch (#469)
  * Fix comparing exec.Cmd in mock on Go1.20
- from version 20230316.00
  * Remove old images from e2e tests image list
- from version 20230227.01
  * Update dependencies (#466)
- from version 20230227.00
  * Bump golang.org/x/sys from 0.0.0-20210923061019-b8560ed6a9b7 to 0.1.0 (#463)</changelog>
</package>
<package pkgid="81f8a17d5a120f8901fc43f2c82feffe439bdc75b8ebe8b141adc223cccd18e4" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20230706.02" rel="150000.1.30.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647518400">- Update to version 20220314.01
  * Support COS on arm64 (#426)
- from version 20220314.00
  * Fix previous PR: exec.CommandContext cannot be reused (#425)
- from version 20220304.00
  * Update the error message when an exec task is run on Windows
    without an interpreter (#423)
  * Fix string that apt-get returns when requiring downgrade (#422)
  * e2e_tests: fix patch test rerun (#421)
  * Add --allow-downgrades flag to apt-get calls when it
    fails because of wanting to downgrade a package (#418)
  * Create e2e test that runs apt-get in a state that makes
    it downgrade a package (#420)
  * e2e_tests: update OS targets, adjust retries (#419)
  * Create change_group.yaml (#416)
- from version 20220215.00
  * Add regex support to package exclusion in OS Patch (#415)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1659528000">- Update to version 20220801.00 (bsc#1202100, bsc#1202101)
  * update OWNERS (#438)
  * Close client when RegisterAgent fails. (#436)
- from version 20220714.00
  * Add timeouts for pip/gem updates. (#433)
- from version 20220623.00
  * upgrade to golang 1.16 and override deb build settings for compatibility (#432)
- from version 20220606.00
  * new example policy to ensure sshd is running on windows VMs (#430)
- from version 20220531.00
  * Add default timeout for pip and gem list commands (#429)
- Don't restart daemon on package upgrade, create a state file instead (bsc#1194319)</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashim in post install scripts (bsc#1195391)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1662552000">- Use install command in %post section to create state file (bsc#1202826)
- Remove useless creation of state file directory in /var/lib</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1665403200">- Update to version 20220829.00
  * Fix exclude packages field processing (#440)
- from version 20220824.00
  * Check for exclusive patches. (#442)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666353600">- Update to version 20221013.01
  * Don't print raw pointer data. (#446)
- from version 20221013.00
  * Delete yum transaction files if created. (#445)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674043200">- Update to version 20221214.00
  * Close clients that are not passed anywhere (#450)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677499200">- Update to version 20230222.00
  * Remove Debian 9 from e2e tests image list (#460)
- from version 20230217.00
  * Update OWNERS (#458)
- from version 20230208.00
  * Fix the error in the `copy_file_from_bucket.yaml` example. (#456)
- from version 20230202.00
  * Update owners file. (#455)
- from version 20230123.00
  * Call FQDN (#454)</changelog>
  <changelog author="rjschwei@suse.com" date="1677499201">- Bump go API version to 1.18 (bsc#1208723)
  + Address CVE-2021-38297 and CVE-2022-23806</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1688731200">- Update to version 20230706.02 (bsc#1212418, bsc#1212759)
  * Update go version in go.mod (#479)
- from version 20230706.01
  * Fix condition to have 10 attempts rather than 11. (#477)
- from version 20230706.00
  * Remove tests for Ubuntu 18.04 (EOL) (#476)
- from version 20230605.00
  * Update old SLES images paths (#475)
- from version 20230602.00
  * Adding what exit codes mean for OS Config policy (#474)
- from version 20230504.00
  * Set DEBIAN_FRONTEND=noninteractive for apt-get (#472)
- from version 20230403.00
  * Disable repos clean-up (#471)
- from version 20230330.00
  * Revert "Call FQDN (#454)" (#470)
- from version 20230327.00
  * support new format of zypper patch (#469)
  * Fix comparing exec.Cmd in mock on Go1.20
- from version 20230316.00
  * Remove old images from e2e tests image list
- from version 20230227.01
  * Update dependencies (#466)
- from version 20230227.00
  * Bump golang.org/x/sys from 0.0.0-20210923061019-b8560ed6a9b7 to 0.1.0 (#463)</changelog>
</package>
<package pkgid="1d6c061181c42294d7a1444380cbc1e8eab80a314c37cb1ab5f3015feb12d8cd" name="grafana" arch="aarch64">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="618f86adec12342edd2a0408e460d3b54dd62cff8cfc9783117ba22bb408e92f" name="grafana" arch="ppc64le">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="8d925c3bb830abacf6223234c219496b8571356d7a7f72bc13f1cb4ed54cebe6" name="grafana" arch="s390x">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="848fa5b0d1069d888ae390893579dd775730dc0fbf78d6f8725f324079fb36b1" name="grafana" arch="src">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="1a044d18240d82e9302cc094d95d6c68cdd3420b6c801849b9bb1ab29d03fcd2" name="grafana" arch="x86_64">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="f7e6ee9e0ca609e03fc63cafca4a63083049792e80c11cb2a35d39a76a67ee3b" name="grafana" arch="aarch64">
  <version epoch="0" ver="9.5.5" rel="150200.3.44.1"/>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
</package>
<package pkgid="bc2ee567cfeca07a381178a86a5c3b009a9e8581ee619cb31e1c075863fcc770" name="grafana" arch="ppc64le">
  <version epoch="0" ver="9.5.5" rel="150200.3.44.1"/>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
</package>
<package pkgid="f399a97765150a5fd38c3e3d35421a1df75092d7c6b375f698ba72d976ca735d" name="grafana" arch="s390x">
  <version epoch="0" ver="9.5.5" rel="150200.3.44.1"/>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
</package>
<package pkgid="bcd8a96761064b5a31cab7c922ed98f3dd060aafbf3a06c3b85a335010d6929d" name="grafana" arch="src">
  <version epoch="0" ver="9.5.5" rel="150200.3.44.1"/>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
</package>
<package pkgid="8b52467863e86a723f2943c05b0e1db35e096753a6b7f53d48f96682b14ffc75" name="grafana" arch="x86_64">
  <version epoch="0" ver="9.5.5" rel="150200.3.44.1"/>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683201">- Update to 9.5.1
  * Bug fixes
    Loki Variable Query Editor: Fix bug when the query is updated
    Expressions: Fix expression load with legacy UID -100</changelog>
  <changelog author="witold.bedyk@suse.com" date="1687521600">- Update to version 9.5.5:
  * Bug fixes
    Security: Fix authentication bypass using Azure AD OAuth
    (bsc#1212641, CVE-2023-3128, jsc#PED-3694).
    Auth: Show invite button if disable login form is set to false.
    Azure: Fix Kusto auto-completion for Azure datasources.
    RBAC: Remove legacy AC editor and admin role on new dashboard
    route.
    API: Revert allowing editors to access GET /datasources.
    Settings: Add ability to override skip_org_role_sync with Env
    variables.
- Update to version 9.5.3:
  * Bug fixes
    Query: Prevent crash while executing concurrent mixed queries
    (bsc#1212099, CVE-2023-2801).
    Alerting: Require alert.notifications:write permissions to test
    receivers and templates (bsc#1212100, CVE-2023-2183).
- Update to version 9.5.2:
  * Bug fixes
    Alerting: Scheduler use rule fingerprint instead of version.
    Explore: Update table min height.
    DataLinks: Encoded URL fixed.
    TimeSeries: Fix leading null-fill for missing intervals.
    Dashboard: Revert fixed header shown on mobile devices in the
    new panel header.
    PostgreSQL: Fix TLS certificate issue by downgrading lib/pq.
    Provisioning: Fix provisioning issues with legacy alerting and
    data source permissions.
    Alerting: Fix misleading status code in provisioning API.
    Loki: Fix log samples using `instant` queries.
    Panel Header: Implement new Panel Header on Angular Panels.
    Azure Monitor: Fix bug that was not showing resources for
    certain locations.
    Alerting: Fix panic when reparenting receivers to groups
    following an attempted rename via Provisioning.
    Cloudwatch Logs: Clarify Cloudwatch Logs Limits.</changelog>
</package>
<package pkgid="0668a8a0f7c14c6415f55d162adef1337a7c91e562b82601b30899b895ddf1d8" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="1cbd07a4b0b7d7c5453688ff9f75266b395e599f4a36fbe1db5c92e599e16b5f" name="grub2" arch="ppc64le">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="d5a06d8dd56183abe31737688cfd08ac4853ab8a0146bc37814275aba3a93f2f" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="7c011823c9820e39360d8fc12cf80f8edd21a78ba4e5138e9c0c566a9bf40889" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="b078878c418336513449aeae76d8fd1cc73257aea3d8e14749427875cc603299" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="f2a0214857469ee8fd42c154e0b121d40e0979ffd1aab1f6b9f9a2eff928d660" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="fa703a41a44aac0ed7040b0f3cbfc6dd1d0cc2399e70043b4f8373988f467841" name="grub2-arm64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="908829b87e3ed1d465f6c38e255fb1c8cd42e7eaf3e45f41d432ecb2bb9e25b3" name="grub2-arm64-efi-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="7b89c7d067f99f38c1f21b47f2f2801ef61983903261875df3f0301b130d6cb2" name="grub2-branding-upstream" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="946c6b4774385a4c0cb947d994d34669022573977e7cab05644ad8591dfe2fef" name="grub2-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="d0ae944ba500297fa03e9e483dbb5e54b6af7dbe10d0ddc2f14530b5309ef440" name="grub2-branding-upstream" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="ec51868895ba35e0ca925b7b86ada56495fcfde10c11071796c1e0310565b153" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="5c21db1030b3421e9f611b5071a072d414770624481e3db7abf6d91d2ebeb770" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="3954f758125debefed3f7a8cb33e8546eb78913f69183208355db97ed93c1b6f" name="grub2-i386-pc-debug" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="b831d33a660ef4eed65416516afa380f4801d148e476be21d8b00555969c04e5" name="grub2-i386-pc-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="0aadd65379a4265e625f6a2d3ab9681efb1e82d48208ded6af458076866382ef" name="grub2-powerpc-ieee1275" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="ae882eda2452a2fb8215492046a22d5cb12cfeb409422451ae87b15510894729" name="grub2-powerpc-ieee1275-debug" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="6305774c56d08c1ba75685d62b5a1d8d40a3a4cee1e86782bb7a10352aeab766" name="grub2-powerpc-ieee1275-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="fddba9ef16b28d7d51742ce90fc96d1f5b83e55eafcabc69599762f6b998ccbe" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="5f0ff208d36f88d8efc32d844c32cdb2a739bb35962dee9602ff17f86c54589d" name="grub2-s390x-emu-debug" arch="s390x">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="bdbad015cbc37a537a66649e7e564677911c552d1aed3a16549f7c67a6f6595a" name="grub2-s390x-emu-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="4387f611612ae6abd47ba7e7ccc8caea2a8fe217fbbd24842fc585e7670cd057" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="ac7a37c63fac02be7e6fc3e11e0a81abc379e97945309abf11185db18478c0cd" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="c62cd4d5d71d3041be1b7e22a0707db00c8672c026d06aba650126d57ee37daf" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="5d395af886415d2d6ff90d627b435a664be08638282c567ca3c46cc2026be2ca" name="grub2-x86_64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="e15ac96fc2df351afc7f25b0020375bf0b13166d95075a2633a81e62e3be412c" name="grub2-x86_64-efi-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="5b9a7940f506318ec51ca725bc1bcec9d3da7978ef5cf698d53184e33290b6bb" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="83df76d0757d957b60381cb6e552df3007601ac31584d337b0012ba2cd3e8182" name="grub2-x86_64-xen-extras" arch="noarch">
  <version epoch="0" ver="2.06" rel="150500.29.3.1"/>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1666958400">- NVMeoFC support on grub (jsc#PED-996)
  * 0001-ieee1275-add-support-for-NVMeoFC.patch
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
  * 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
  * 0004-ofpath-controller-name-update.patch
- TDX: Enhance grub2 measurement to TD RTMR (jsc#PED-1265)
  * 0001-commands-efi-tpm-Refine-the-status-of-log-event.patch
  * 0002-commands-efi-tpm-Use-grub_strcpy-instead-of-grub_mem.patch
  * 0003-efi-tpm-Add-EFI_CC_MEASUREMENT_PROTOCOL-support.patch
- Measure the kernel on POWER10 and extend TPM PCRs (PED-1990)
  * 0001-ibmvtpm-Add-support-for-trusted-boot-using-a-vTPM-2..patch
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="mchang@suse.com" date="1669118400">- Support grub2-install on LUKS2 encrypted device
  * 0001-devmapper-getroot-Have-devmapper-recognize-LUKS2.patch
  * 0002-devmapper-getroot-Set-up-cheated-LUKS2-cryptodisk-mo.patch
  * 0003-disk-cryptodisk-When-cheatmounting-use-the-sector-in.patch</changelog>
  <changelog author="mchang@suse.com" date="1670241600">- Add tpm to signed grub.elf image (PED-1990) (bsc#1205912)
- Increase initial heap size from 1/4 to 1/3
  * 0001-ieee1275-Increase-initially-allocated-heap-from-1-4-.patch</changelog>
  <changelog author="mchang@suse.com" date="1671451200">- Setup multiple device paths for a nvmf boot device (bsc#1205666)
  * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1675771200">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch</changelog>
  <changelog author="mchang@suse.com" date="1675857600">- Fix nvmf boot device setup (bsc#1207811)
  * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch</changelog>
  <changelog author="mchang@suse.com" date="1677067200">- Fix out of memory error on lpar installation from virtual cdrom (bsc#1208024)
  * 0001-ieee1275-Further-increase-initially-allocated-heap-f.patch
  * 0002-tpm-Disable-tpm-verifier-if-tpm-is-not-present.patch
- Fix lpar got hung at grub after inactive migration (bsc#1207684)
  * 0002-ieee1275-implement-vec5-for-cas-negotiation.patch</changelog>
  <changelog author="glin@suse.com" date="1677153600">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1681214400">- Resolve some issues with OS boot failure on PPC NVMe-oF disks and made
  enhancements to PPC secure boot's root device discovery config (bsc#1207230)
- Ensure get_devargs and get_devname functions are consistent
  * 0001-openfw-Ensure-get_devargs-and-get_devname-functions-.patch
- Fix regex for Open Firmware device specifier with encoded commas
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Fix regular expression in PPC secure boot config to prevent escaped commas
  from being treated as delimiters when retrieving partition substrings.
- Use prep_load_env in PPC secure boot config to handle unset host-specific
  environment variables and ensure successful command execution.
  * 0004-Introduce-prep_load_env-command.patch
- Refreshed
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1681819200">- Fix no prep partition error on non-PReP architectures by making the
  prep_loadenv module exclusive to powerpc_ieee1275 platform (bsc#1210489)
  * 0004-Introduce-prep_load_env-command.patch
- Fix the issue of freeing an uninitialized pointer
  * 0002-prep_loadenv-Fix-regex-for-Open-Firmware-device-spec.patch
- Rediff
  * 0005-export-environment-at-start-up.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0002-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="05a58d3ea1c21d86a5f53232fcea0da9e1eaa07f76176da5a86934f5d81586d9" name="gstreamer" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="dce0f2139d8ca924626646fb7748c284703e844be98a5115fe53ee243942e6a7" name="gstreamer" arch="ppc64le">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="57215bc1089d84b06d5a571784c175212a471d860dd9ca3e0a1b340007ea1401" name="gstreamer" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="0ca98b6b4fe7c47b0d00557f26c15c3bc6d49d91cc5fb3724c631a81cd861321" name="gstreamer" arch="src">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="cf8079296bee2bca4c4a1c73626a661ba13ede5cd886acc476a9b607c079e4cd" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="76a63b765f1f4b6afb001b22107d24bdb66a484b7ffc0a9c28ecc7dc60a5f328" name="gstreamer-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="09f3c42edd64af8742f30fcb87ffc846f30aaa9e3028a4dd50c382e8daa5b6ab" name="gstreamer-devel" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="fc895f420a172ff53b055b0d295b1206efc1ad1e33613a65eaa34523b6880eb5" name="gstreamer-devel" arch="ppc64le">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="26b509aece4026d63a7362c8e57a7878626a07d9cce1c8499937e0e114c452f6" name="gstreamer-devel" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="a8192f2c74aeb57f03484ae65d965a86b9033adb52c4464b525e27ab63ffd23f" name="gstreamer-devel" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="fc096c98c16a0c3b8391653a68f3032f058e4494ae8caf46e9caa87b53c81999" name="gstreamer-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="2cbc9013b1425e533e7bf01ce2810a36d7860026b3ee4a9256d372d7d0ba6966" name="gstreamer-lang" arch="noarch">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="d1891d36ad533885e063fd68df138b365b057e4c9595c6c060cbb9fdc3cd6b57" name="gstreamer-utils" arch="aarch64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="15e7be4f5ff437466ea51ad5604a376a26dc2964a2c0b69f421b8e0eec6695df" name="gstreamer-utils" arch="ppc64le">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="59ac4ac89dcad22b6c8f5e1728a570ca119170783a0b34fc6517d3046c3171cd" name="gstreamer-utils" arch="s390x">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="8c1b5999eaf1a8b18421b4c9eaa1c101e58469b84abb7f4e46fd3754ceda484b" name="gstreamer-utils" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="150500.3.2.3"/>
  <changelog author="dimstar@opensuse.org" date="1603540800">- Do not manually install gst-tester-%{gst_branch}: meson_install
  takes care of this already.</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gstreamer changes:
  - aggregator: make peek() has() pop() drop() buffer API
    threadsafe
  - gstvalue: don't write to const char *
  - meson: Disallow DbgHelp for UWP build
  - info: Fix build on Windows ARM64 device
  - build: use cpu_family for arch checks
  - basetransform: Fix in/outbuf confusion of
    _default_transform_meta
  - Fix documentation
  - info: Load DbgHelp.dll using g_module_open()
  - padtemplate: mark documentation caps as may be leaked
  - gstmeta: intern registered impl string
  - aggregator: Hold SRC_LOCK while unblocking via
    SRC_BROADCAST()
  - ptp_helper_post_install.sh: deal with none
  - skip elements/leak.c if tracer is not available
  - aggregator: Wake up source pad in PAUSED&lt;-&gt;PLAYING
    transitions
  - input-selector: Wake up blocking pads when releasing them
  - ptp: Also handle gnu/kfreebsd</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607428800">- Update to version 1.18.2:
  + Highlighted bugfixes:
  - Fix MPEG-TS timestamping regression when playing DVB streams
  - compositor: fix artefacts in certain input scaling/conversion
    situations and make sure that the output format is actually
    supported, plus renegotiation fixes
  - Fix sftp:// URI playback in decodebin/playbin via giosrc
  - adaptivedemux/dashdemux/hlsdemux fixes
  - rtsp-server fixes
  - android media: fix crash when encoding AVC
  - fix races in various unit tests
  - lots of other bug fixes and memory leak fixes
  - various stability, performance and reliability improvements
  - g-i annotation fixes
  - build fixes
  + gstreamer changes:
  - bin: When removing a sink, check if the EOS status changed
  - info: colorize PIDs in log messages
  - aggregator: Include min-upstream-latency in buffering time,
    helps especially with performance issues on single core
    systems where there are a lot of threads running
  - typefind: copy seqnum to new segment event, fixing issues
    with oggdemux operating in push mode with typefind operating
    in pull mode
  - identity, clocksync: Also provide system clock if sync=false
  - queue2: Fix modes in scheduling query handling
  - harness: Handle element not being set cleanly
  - g-i: Add some missing nullable annotations, and fix some
    nullable annotations:
  - gst_test_clock_process_next_clock_id() returns nullable
  - gst_stream_type_get_name() is not nullable
  - build: fix build issue when compiling for 32-bit
    architectures with 64-bit time_t (e.g. riscv32) by increasing
    padding in GstClockEntryImpl in gst_private.h
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="fcrozat@suse.com" date="1609329600">- Move gst-plugins-doc-cache-generator to devel subpackage
  (remove python3 dependency on main gstreamer package).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + Highlighted bugfixes:
  - Fix ogg playback regression for ogg files that also have ID3
    or APE tags
  - compositor: fix artefacts and invalid memory access when
    blending subsampled formats
  - Exported mini object ref/unref/copy functions for use in
    bindings such as gstreamer-sharp
  - Add support for Apple silicon (M1) to cerbero package builder
  - Ship RIST plugin in binary packages
  - Various stability, performance and reliability improvements
  - Memory leak fixes
  - Build fixes
  + gstreamer:
  - gst: Add non-inline ref/unref/copy/replace methods for
    various mini objects (buffer, bufferlist, caps, context,
    event, memory, message, promise, query, sample, taglist, uri)
    for use in bindings such as gstreamer-sharp.
  - harness: don't use GST_DEBUG_OBJECT with GstHarness which is
    not a GObject.</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 1.18.4:
  important security fixes for ID3 tag reading, matroska and realmedia
  parsing, and gst-libav audio decoding
  Details:
  * audiomixer, audioaggregator: input buffer handling fixes
  * decodebin3: improve stream-selection message handling
  * uridecodebin3: make “caps” property work
  * wavenc: fix writing of INFO chunks in some cases
  * v4l2: bt601 colorimetry, allow encoder resolution changes, fix
    decoder frame rate negotiation
  * decklinkvideosink: fix auto format detection, and fixes for 29.97fps
    framerate output
  * mpeg-2 video handling fixes when seeking
  * avviddec: fix bufferpool negotiation and possible memory corruption
    when changing resolution
  * various stability, performance and reliability improvements
  * memory leak fixes
  * build fixes: rpicamsrc, qt overlay example, d3d11videosink on UWP
  * info: Don’t leak log function user_data if the debug system is
    compiled out
  * task: Use SetThreadDescription() Win32 API for setting thread names,
    which preserves thread names in dump files.
  * buffer, memory: Mark info in map functions as caller-allocates and
    pass allocation params as const pointers where possible
  * clock: define AUTO_CLEANUP_FREE_FUNC for GstClockID
  * tag: id3v2: fix frame size check and potential invalid reads
  * audio: Fix gst_audio_buffer_truncate() meta handling for
    non-interleaved audio
  * audioresample: respect buffer layout when draining
  * audioaggregator: fix input_buffer ownership
  * decodebin3: change stream selection message owner, so that the app
    sends the stream-selection event to the right element
  * rtspconnection: correct data_size when tunneled mode
  * uridecodebin3: make caps property work
  * video-converter: Don’t upsample invalid lines
  * videodecoder: Fix racy critical when pool negotiation occurs during
    flush
  * video: Convert gst_video_info_to_caps() to take self as const ptr
  * examples: added qt core dependency for qt overlay example
  * matroskademux: header parsing fixes
  * rpicamsrc: depend on posix threads and vchiq_arm to fix build on
    raspios again
  * wavenc: Fixed INFO chunk corruption, caused by odd sized data not
    being padded
  * wavpackdec: Add floating point format support to fix distortions in
    some cases
  * v4l2: recognize V4L2 bt601 colorimetry again
  * v4l2videoenc: support resolution change stream encode
  * v4l2h265codec: fix HEVC profile string issue
  * v4l2object: Need keep same transfer as input caps
  * v4l2videodec: Fix vp8 and vp9 streams can’t play on board with
    vendor bsp
  * v4l2videodec: fix src side frame rate negotiation
  * avwait: Don’t post messages with the mutex locked
  * d3d11h264dec: Reconfigure decoder object on DPB size change and keep
    track of actually configured DPB size
  * dashsink: fix double unref of sinkpad caps
  * decklinkvideosink: Use correct numerator for 29.97fps
  * decklinkvideosink: fix auto format detection
  * decklinksrc: Use a more accurate capture time
  * d3d11videosink: Fix build error on UWP
  * interlace: negotiation and buffer leak fixes
  * mpegvideoparse: do not clip, so decoder receives data from keyframe
    even if it’s before the segment start
  * mpegtsparse: Fix switched DTS/PTS when set-timestamps=false
  * nvh264sldec: Reopen decoder object if larger DPB size is required
  * sdpsrc: fix double free if sdp is provided as string via the
    property
  * vulkan: Fix elements long name.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + aggregator:
  - Release the SRC lock while querying latency
  - Release pads' peeked buffer when removing the pad or
    finalizing it
  + basesink: Don't swap rstart/rstop when stepping
  + basesrc: Print segments with GST_SEGMENT_FORMAT and not
    GST_PTR_FORMAT
  + childproxy: init value in gst_child_proxy_get_property() if
    needed
  + clocksync: Fix providing system clock by default
  + concat:
  - Properly propagate seqnum of segment events
  - adjust running time offsets on downstream events
  - fix locking in SEGMENT event handler
  + downloadbuffer/sparsefile: several fixes for win32
  + element: NULL the lists of contexts in dispose()
  + multiqueue:
  - Use running time of gap events for wakeups.
  - Ensure peer pad exists when iterating internal links
  + pad:
  - Keep IDLE probe hook alive during immediate callback
  - Ensure last flow return is set on sink pads in push mode
  - Don't spam the debug log at INFO level when default-chaining
    a buffer list
  - clear probes holding mutex
  + parse-launch:
  - Fix a critical when using the : operator.
  + Don't do delayed property setting for top-level properties.
  + plugin: load plugins with unknown license strings
  + ptpclock: Don't leak the GList
  + queue2: Refuse all serialized queries when posting buffering
    messages
  + systemclock: Update monotonic reference time when re-scheduling
  + High CPU usage in 1.18 (but not master) when pausing playback
    in gnome-music
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream and
  gnome-patch-translation support (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + gstplugin: Fix for UWP build
  + gst-ptp-helper: Do not disable multicast loopback
  + concat: fix qos event handling
  + pluginfeature: Fix object leak
  + baseparse: fix invalid avg_bitrate after reset
  + multiqueue: Fix query unref race on flush
  + gst: Initialize optional event/message fields when parsing
  + bitwriter: Fix the trailing bits lost when getting its data
  + multiqueue: never consider a queue that is not waiting
  + input-selector: Use proper segments when cleaning cached
    buffers</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Use ldconfig_scriptlets macro for post(un) handling where
  possible.
- Update Source url.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + deinterlace: various bug fixes for yadif, greedy and scalerbob
    methods
  + gtk video sink: Fix rotation not being applied when paused
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on input caps
    changes
  + videoaggregator fixes (negative rate handling, current position
    rounding)
  + soup http plugin: Lookup libsoup dylib files on Apple
    platforms; fix Cerbero static build on Android and iOS
  + Support build against libfreeaptx in openaptx plugin
  + Fix linking issues on Illumos distros
  + GstPlay: Fix new error + warning parsing API (was unusuable
    before)
  + mpegtsmux: VBR muxing fixes
  + nvdecoder: Various fixes for 4:4:4 and high-bitdepth decoding
  + Support build against libfreeaptx in openaptx plugin
  + webrtc: Various fixes to the webrtc-sendrecv python example
  + macOS: support a relocatable `GStreamer.framework` on macOS
  + macOS: fix applemedia plugin failing to load on ARM64 macOS
  + windows: ship wavpack library
  + gst-python: Fix build with Python 3.11
  + various bug fixes, memory leak fixes, and other stability and
    reliability improvements
  + plugin loader: show the reason when spawning of
    gst-plugin-scanner fails
  + registry, plugin loading: fix dynamic relocation if
    GST_PLUGIN_SUBDIR (libdir) is not a single subdirectory;
    improve GST_PLUGIN_SUBDIR handling
  + context: fix transfer annotation on
    gst_context_writable_structure() for bindings
  + baseparse: Don't truncate the duration to milliseconds in
    gst_base_parse_convert_default()
  + bufferpool: Deactivate pool and get rid of references to other
    objects from dispose instead of finalize</changelog>
  <changelog author="mmachova@suse.com" date="1652097600">- Update to version 1.20.2
  + Highlighted bugfixes:
  - avviddec: Remove vc1/wmv3 override and fix crashes on WMV
    files with FFMPEG 5.0+
  - macOS: fix plugin discovery for GStreamer installed via brew
    and fix loading of Rust plugins
  - rtpbasepayload: various header extension handling fixes
  - rtpopusdepay: fix regression in stereo input handling if
    sprop-stereo is not advertised
  - rtspclientsink: fix possible shutdown deadlock
  - mpegts: gracefully handle "empty" program maps and fix AC-4
    detection
  - mxfdemux: Handle empty VANC packets and fix EOS handling
  - playbin3: various playbin3, uridecodebin3, and playsink fixes
  - ptpclock: fix initial sync-up with certain devices
  - gltransformation: let graphene alloc its structures memory
    aligned
  - webrtcbin fixes and webrtc sendrecv example improvements
  - video4linux2: various fixes including some fixes for
    Raspberry Pi users
  - videorate segment handling fixes and other fixes
  - nvh264dec, nvh265dec: Fix broken key-unit trick modes and
    reverse playback
  - wpe: Reintroduce persistent WebContext
  - cerbero: Make it easier to consume 1.20.1 macOS GStreamer
    .pkgs
  - build fixes and gobject annotation fixes
  - bug fixes, security fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - devicemonitor: clean up signal handlers and hidden providers
    list
  - Leaks tracer: fix pthread_atfork return value check leading
    to bogus warning in log
  - Rust plugins: Not picked up by the plugin loader on macOS
  - Failed to use plugins of latest GStreamer version 1.20.x
    installed by brew on macOS
  - ptpclock: Allow at least 100ms delay between Sync/Follow_Up
    and Delay_Req/Delay_Resp messages. Fixes problems acquiring
    initial sync with certain devices
  - meson: Add -Wl,-rpath,${libdir} on macOS
  - registry: skip Rust dep builddirs when searching for plugins
    recursively</changelog>
  <changelog author="schwab@suse.de" date="1652097601">- Enable use of libunwind on riscv64</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3
  + Highlighted bugfixes:
  - Security fixes in Matroska, MP4 and AVI demuxers
  - Fix scrambled video playback with hardware-accelerated
    VA-API decoders on certain Intel hardware
  - playbin3/decodebin3 regression fix for unhandled streams
  - Fragmented MP4 playback fixes
  - Android H.265 encoder mapping
  - Playback of MXF files produced by FFmpeg before March 2022
  - Fix rtmp2sink crashes on 32-bit platforms
  - WebRTC improvements
  - D3D11 video decoder and screen recorder fixes
  - Performance improvements
  - Support for building against OpenCV 4.6 and other build fixes
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - clock: Avoid creating a weakref with every entry
    (performance improvement)
  - plugin: add Apache 2 license to list of known licenses to avoid
    warning
  - gst_plugin_load_file: force plugin reload if filename differs
    Add support for LoongArch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + Highlighted bugfixes in 1.20.4:
  - avaudiodec: fix playback issue with WMA files, would throw an
    error at EOS with FFmpeg 5.x
  - Fix deadlock when loading gst-editing-services plugin
  - Fix input buffering capacity in live mode for aggregator,
    video/audio aggregator subclasses, muxers
  - glimagesink: fix crash on Android
  - subtitle handling and subtitle overlay fixes
  - matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  - rtspsrc: fix control url handling for spec compliant servers
    and add fallback for incompliant servers
  - WebRTC fixes
  - RTP retransmission fixes
  - video: fixes for formats with 4x subsampling and horizontal
    co-sited chroma (Y41B, YUV9, YVU9 and IYU9)
  - Fix consuming of the macOS package as a framework in XCode
  - Performance improvements
  - Miscellaneous bug fixes, memory leak fixes, and other
    stability and reliability improvements
  + gstreamer:
  - buffer: drop parent meta in deep copy/foreach_metadata
  - devicemonitor: Use a sync bus handler for the provider to
    avoid accumulating all messages until the provider is stopped
  - element: Fix requesting of pads with string templates
  - gst:
    . Protect initialization state with a recursive mutex
    . Add missing define guard for build without gstreamer debug
    logging support
  - gst_init: Initialize static plugins just before dynamic plugins
  - info: Parse "NONE" as a valid level name
  - meta: Set the parent refcount of the GstStructure correctly
  - pluginloader: Don't hang on short reads/writes
  - tracers: leaks:
    . Fix potentially invalid memory access when trying to detect
    object type
    . Fix object-refings.class flags
  - uri: When setting the same string again do nothing
  - value: Don't loop forever when serializing invalid flag
  + Base Libraries:
  - aggregator:
    . Fix input buffering in live mode (was too low before in
    many cases)
    . Fix reversed active/flushing arguments in debug log output
    . Reset EOS flag after receiving a stream-start event
  + Core Elements: queue2:
  - Hold the lock when modifying sinkresult
  - Fix deadlock when deactivate is called in pull mode</changelog>
  <changelog author="dmueller@suse.com" date="1671710400">- update to 1.20.5:
  + This release only contains bugfixes and it should be safe to
    upgrade from 1.20.x.
  + systemclock waiting fixes for certain 32-bit platforms/libcs
  + alphacombine: robustness improvements for corner case scenarios
  + avfvideosrc: Report latency when doing screen capture
  + d3d11videosink: various thread-safety and stability fixes
  + decklink: fix performance issue when HDMI signal has been lost
    for a long time
  + flacparse: Fix handling of headers advertising 32 bits per
    sample
  + mpegts: Handle when iconv doesn't support ISO 6937 (e.g. musl
    libc)
  + opengl: fix automatic dispmanx detection for rpi4 and fix usage
    of eglCreate/DestroyImage
  + opusdec: Various channel-related fixes
  + textrender: event handling fixes, esp. for GAP event
  + subparse: Fix non-closed tag handling
  + videoscale: fix handling of unknown buffer metas
  + videosink: reverse playback handling fixes
  + qtmux: Prefill mode fixes, especially for raw audio
  + multiudpsink: allow binding to IPv6 address
  + rtspsrc:
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: fix playback stall if there are unlinked pads
  + v4l2: Fix SIGSEGV on state change during format changes
  + wavparse robustness fixes
  + Fix static linking on macOS (opengl, vulkan)
  + gstreamer-vaapi: fix headless build against mesa &gt;= 22.3.0
  + GStreamer Editing Services library: Fix build with tools
    disabled
  + webrtc example/demo fixes
  + unit test fixes for aesdec and rtpjitterbuffer
  + Cerbero: Fix ios cross-compile with cmake on M1; some recipe
    updates and other build fixes
  + Miscellaneous bug fixes, memory leak fixes, and other stability
    and reliability improvements
  + Performance improvements
  + Changes in gstreamer base package:
  - allocator: Copy allocator name in gst_allocator_register()
  - concat: Properly propagate EOS seqnum
  - fakesrc: avoid time overflow with datarate
  - Fix build of 1.20 branch with Meson 0.64.1 for those who have
    hotdoc installed on their system.
  - gst-inspect: Don't leak list
  - meson: fix check for pthread_setname_np()
  - miniobject: support higher refcount values
  - pads: Fix non-serialized sticky event push, e.g. instant
    change rate events
  - padtemplate: Fix annotations
  - systemclock: Use futex_time64 syscall on x32 and other
    platforms that always...
  - -Wimplicit-function-declaration in pthread_setname_np check
    (missing GNUSOURCE)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + AV1 video codec support improvements
  + New HLS, DASH and Microsoft Smooth Streaming adaptive streaming
    clients
  + Qt6 support for rendering video inside a QML scene
  + Minimal builds optimised for binary size, including only the
    individual elements needed
  + Playbin3, Decodebin3, UriDecodebin3, Parsebin enhancements and
    stabilisation
  + WebRTC simulcast support and support for Google Congestion
    Control
  + WebRTC-based media server ingestion/egress (WHIP/WHEP) support
  + New easy to use batteries-included WebRTC sender plugin
  + Easy RTP sender timestamp reconstruction for RTP and RTSP
  + ONVIF timed metadata support
  + New fragmented MP4 muxer and non-fragmented MP4 muxer
  + New plugins for Amazon AWS storage and audio transcription
    services
  + New gtk4paintablesink and gtkwaylandsink renderers
  + New videocolorscale element that can convert and scale in one
    go for better performance
  + High bit-depth video improvements
  + Touchscreen event support in navigation API
  + Rust plugins now shipped in macOS and Windows/MSVC binary
    packages
  + H.264/H.265 timestamp correction elements for PTS/DTS
    reconstruction before muxers
  + Improved design for DMA buffer sharing and modifier handling
    for hardware-accelerated video decoders/encoders/filters and
    capturing/rendering on Linux
  + Video4Linux2 hardware accelerated decoder improvements
  + CUDA integration and Direct3D11 integration and plugin
    improvements
  + New H.264 / AVC, H.265 / HEVC and AV1 hardware-accelerated
    video encoders for AMD GPUs using the Advanced Media Framework
    (AMF) SDK
  + applemedia: H.265 / HEVC video encoding + decoding support
  + androidmedia: H.265 / HEVC video encoding support
  + New "force-live" property for audiomixer, compositor,
    glvideomixer, d3d11compositor etc.
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase patches with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="munix9@googlemail.com" date="1675771200">- Add fix using sed to find gst-plugin-scanner-%{_target_cpu}
  program (boo#1207908).</changelog>
</package>
<package pkgid="a92cb145432a0c1051c3f1aa42a10bbd302d96cca74d6cee36bb4b5733fb6c69" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="da5f8a36eee2e187938dd34ec07f33d6791b21b5382f9eec088534c6263c8fa1" name="gtk3-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="14ac0e5d7874bad76c021e0c6126f0b411ea070672e4a54bc509dec771a75dc2" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="7006c98e34670024feb94a9ad242dc813de2d7d56dbbd75e6d3e51494799492b" name="gtk3-devel" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="ff19e989edf345836fe0b7da4b277abfb33d8ad0a6de4b6ad61156111168ef8b" name="gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="ac79e5acddbc05e3cebecdf992aeac8168ab99f1dad371b569bb501aa78ab932" name="gtk3-devel" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="c8f08d8fce30c95167be5b94867dacb945e0430cf45dd6db9a4bbad4d8287c6e" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="436c56cd41ee5a190f84b088ca9caafd2af538c9bf51962572e6b2a2d4e2ae08" name="gtk3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="2407f8d155e856da361a0da6c64570fd53ba0cb9dff369de740d3a7495f34da8" name="gtk3-devel-doc" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="dd3e7153c2974548b2bf8e0a6dcde39605c5c816d8d680ce60071051cb441c8a" name="gtk3-devel-doc" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="d1c7a38a2a5465670b4d623d6a1e14deba8c2f3634ab96f09bcce17e50ff6bf0" name="gtk3-devel-doc" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="6f960193eba45657ba2472d45fcf4bf7d0556547860429245f6a5e72d2e400a2" name="gtk3-devel-doc" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b5655982b3e7953edf323496c01ee983f4d1c36274d5872b85799e17fb7dd9b1" name="gtk3-doc" arch="src">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="a013cccc518fa1e1d3fc2a020b980fa585d879294f39157ecea6815042e489ef" name="gtk3-immodule-amharic" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="e0be0607f9c9591f97e3f819a73558eb600d09fa67cc8c6d334973d1658bc2ec" name="gtk3-immodule-amharic" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="2542aeda47a8f86a5f7920c4ce128d9eb3685aae798c3fd38ac0870e3294420f" name="gtk3-immodule-amharic" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="5b72250e6c7d0118a81f5b8b234847e1f25b134f81094c530fb4d531b2014509" name="gtk3-immodule-amharic" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="a13f81e29605fbdf81305f05f97db727f9b8367a5b6086e2b61978364cc27355" name="gtk3-immodule-amharic-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="ae1af236739e0f29930a95560322009ba5c0d68187802ff1df5c3a7ce2103661" name="gtk3-immodule-broadway" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="4d3b4d08e0ddce415420efe24bda89b78a1ab7af82e6e07e7030bfd757a64517" name="gtk3-immodule-broadway" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="02c049120353031f0f34d8ef36e3308eac58b3d3097ee0fd98494377fadf5131" name="gtk3-immodule-broadway" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="43b3c21d2a6d85bfa0fd85bfaea0abb19a1a0029a145496239bcb60a1985007f" name="gtk3-immodule-broadway" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="327c5e08930bc675c672a72555ecfd4012ffd283839220b81cdbfa88653cbe46" name="gtk3-immodule-inuktitut" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b4f3ab823540eaf16232410e2307779277e6aa22fcc9bf6cbd64a63a38552b4a" name="gtk3-immodule-inuktitut" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="8557e9649c0fbe94a23b134a4dbec74bcff83a03b91fe75be70281e363bca514" name="gtk3-immodule-inuktitut" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="75c806068c396540e8da7ba1f9713353467ae84e9cf3bbe68613e3f3373d551d" name="gtk3-immodule-inuktitut" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b743962fac995d4f9233830176428f3c620786b8c47cd9dd45d6f7d2d217208f" name="gtk3-immodule-inuktitut-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="c9147129e37d1823465a7d5c71baf505331184046decdf558b36043f198567b1" name="gtk3-immodule-multipress" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="91c04ba606434dd6477a46f9af886b8ee26fdc845f70c53ec16012637be50f77" name="gtk3-immodule-multipress" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="5b8396839ee65b682ca8f97a23cf64480fa83fd299ac5db0bb9ae9def79a23a2" name="gtk3-immodule-multipress" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b7944bbbbacbc4541fb83b5e6a05aaa5e9b0bcf26354f9e71c48eac69dd0610e" name="gtk3-immodule-multipress" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="88ee88183a5bb6a8c5e821ef525a9231efb8ae50c63fcf280555aad2e24ce239" name="gtk3-immodule-multipress-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="df467b097097d22481630a6e8047b04cec9c58890c200e3c5fddb2e236381294" name="gtk3-immodule-thai" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="369f5db55e7f9f00bf80dd1552cd0effb80368ef0a4c98e67f7668c1c375f3c3" name="gtk3-immodule-thai" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="24fc4e72da933b07f57dc92a9569f7f319ab14966bc0d5b2a83c568cd8803da5" name="gtk3-immodule-thai" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="a1446409f509b2dab2900485989376bcd5fbcf29434965057800e0e395248705" name="gtk3-immodule-thai" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="11c392dd10d074c8abb64e031b1057504acf73e94738d440b98c6add8e254c4e" name="gtk3-immodule-thai-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="788c5340f4dd9da45d9c5f5236628977f59673b93cc39ef6f2b2d984f54a2d42" name="gtk3-immodule-tigrigna" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="70dc82693131848aa01f35b8c4c8f8521f035893e5f0b62c48de6da662864233" name="gtk3-immodule-tigrigna" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="5144058ed555becd4ce02ea1428b6dcd5b9c43f551f0188fc4ab1c392b709fa9" name="gtk3-immodule-tigrigna" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="08433c23c337f0654eb286b88e797b281e03d445a2fd82b16e34ead715e6a977" name="gtk3-immodule-tigrigna" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="99647475b501836029dd5ac8defea42fe09f397629e0601f7e2efb72a33f8167" name="gtk3-immodule-tigrigna-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="f7659ff01f9cfd3e3d6d903619e3dc5c8e17fc5a5315aaafa26c095898e38ab7" name="gtk3-immodule-vietnamese" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="f70e18ff717df3b096b97e89acfcb3c316484a8bfe7a3974bb8b6545c5f27312" name="gtk3-immodule-vietnamese" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="c5d9735fa43323b7e9bd8632c6293dac9546c935dc2f8a4c379071a894e1e0dd" name="gtk3-immodule-vietnamese" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="62ed3f37a1c6e8bfb77a66f9443ecc8b42d35c557390ec78999fba29d61c6e9e" name="gtk3-immodule-vietnamese" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="898f3b308f871988007692d59f6684ac3f3434ca865cc9d6b83c90968f3e1254" name="gtk3-immodule-vietnamese-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b0161f4e601e2e075d71bcf36e386675a40450d798b31976e002a56479c1a030" name="gtk3-immodule-wayland" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="290c2c0ba6f3356e986408e52f3890046db56c7abf60a85f1300ca256af5e015" name="gtk3-immodule-wayland" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="79bf77a3498597336f708ef44a476ed9dc32f9f78b0efb77b85205e48302a69e" name="gtk3-immodule-wayland" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b95b3f769dd44d6489af9f85767e6ab79253f98f9c4403e8d5388378cf3ebe09" name="gtk3-immodule-wayland" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="a69b4569b05a588a804068262f33a2f88faf30b251f29caf1cd1b40729edfdb0" name="gtk3-immodule-wayland-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="28e12031e662e2b4f89c60c0c28c282d9c9e8b09150b9c50eeaa6a8d3d758dd7" name="gtk3-immodule-xim" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="7a410c7c109dec40aa89ba179372df9783c037431afc7e13b9785068cdc097e3" name="gtk3-immodule-xim" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="e5d9cb65746efaa94201b6b347347781971114d01cac24b56ab055a10ce89c0a" name="gtk3-immodule-xim" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b78c1086559ee4da73be2ff3eb7002504553714032979ef09e8891b6d48f4021" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="f7450ec87ff93af8ee2fb897d797a09d9c2e0bca685be785f593b580f4fe71dd" name="gtk3-immodule-xim-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="dd21c6a24107c91a6338880c51db1a6f2210e3cf950737932fb42d2b92b32ba5" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="6acbec59c942fab0cf81511c07b1aa36d7a4949f560d0981e26a7ed95c0f4ee3" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="209aa3b82e7370a568664afda41bb820a53c172703b1903d1122397a938abd06" name="gtk3-tools" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="786a316fb1dad3c87898cb1f88ab6a8c0e44ec70c1c8c00ec0269db00dfeec7a" name="gtk3-tools" arch="ppc64le">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="348b5cea1350fbb48b9f7babb2a3e63e2a46b2233213e2e100252f634285d056" name="gtk3-tools" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="89eca82574f87d42f67c6aa032b46be8c6a60df183fb1bcf0779a2e0b776a821" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="4a1f620d33ef669c9e519e20d17484864f10e06551650c489fa8b2108c99e77e" name="gtk3-tools-32bit" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="b010a64e20b8dd7dfaa320ce4da97033d35575190ce111f81bb1d16ef92af3df" name="guava" arch="noarch">
  <version epoch="0" ver="32.0.1" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
</package>
<package pkgid="283afe9fc8e8b0e06638aaecfff354178afea4edabcb817df1d077c8879d2c3a" name="guava" arch="src">
  <version epoch="0" ver="32.0.1" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
</package>
<package pkgid="42e0fe938864fa436a4c3938d8a3995b50d6282c395b94d15a4b0e2fe6cf6509" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="32.0.1" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
</package>
<package pkgid="d1a05822a983db5c125928160d8c7eea59f2931b2c2bec79b7a8ebb2bacd260b" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="32.0.1" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1555070400">- Initial packaging of guava 25.0</changelog>
  <changelog author="fstrba@suse.com" date="1570708800">- Added patch:
  * guava-25.0-java8compat.patch
    + Avoid callingoverridden methods with covariant return types
    for java.nio.ByteBuffer and java.nio.CharBuffer, which were
    introduced in Java 9
    + This allows us to produce with Java &gt;= 9 binaries that are
    compatible with Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1574424000">- Build the package with ant in order to prevent build cycles
  * using a generated and customized ant build system</changelog>
  <changelog author="fstrba@suse.com" date="1575460800">- Avoid version-less dependencies that can cause problems with
  some tools</changelog>
  <changelog author="fstrba@suse.com" date="1620648000">- Upgrade to guava 30.1.1
  * Fixes:
    + cache: Fixed compatibility between asMap().compute(...)
    and a load.
    + cache: Added @CheckReturnValue to some APIs.
    + collect: Added @DoNotCall to the mutator methods on immutable
    types
    + hash: Removed @Beta from HashCode.
    + io: Removed @Beta from CountingOutputStream.
  * fixes bsc#1179926, CVE-2020-8908: temp directory creation
    vulnerability in Guava versions prior to 30.0
- Removed patch:
  * guava-25.0-java8compat.patch
    + the compatibility is handled in the upstream code
- Added patch:
  * donotmock.patch
    + patch @DoNotMock annotation occurrences in order to put them
    in a format that our regex is able to identify and kill</changelog>
  <changelog author="fstrba@suse.com" date="1647000000">- Remove parent reference from ALL distributed pom files</changelog>
  <changelog author="fstrba@suse.com" date="1652875200">- Upgrade to guava 31.1
  * Fixes:
    + base: Deprecated the Throwables methods lazyStackTrace and
    lazyStackTraceIsLazy. They are no longer useful on any current
    platform.
    + collect: Added a new method
    ImmutableMap.Builder.buildKeepingLast(), which keeps the last
    value for any given key rather than throwing an exception when
    a key appears more than once.
    + collect: As a side-effect of the buildKeepingLast() change,
    the idiom
    ImmutableList.copyOf(Maps.transformValues(map, function))
    may produce different results if function has side-effects.
    + hash: Added Hashing.fingerprint2011().
    + io: Changed ByteStreams.nullOutputStream() to follow the
    contract of OutputStream.write by throwing an exception if
    the range of bytes is out of bounds.
    + net: Added @CheckReturnValue to the package (with a few
    exceptions).
    + net: Added HttpHeaders constant for
    Access-Control-Allow-Private-Network.
    + util.concurrent: Added accumulate/update methods for
    AtomicDouble and AtomicDoubleArray.
  * APIs promoted from @Beta:
    + base: Throwables methods getCausalChain and getCauseAs
    + collect: Streams methods mapWithIndex and findLast
    + collect: the remaining methods in Comparators: min, max,
    lexicographical, emptiesFirst, emptiesLast, isInOrder,
    isInStrictOrder
    + escape: various APIs
    + io: various APIs in Files
    + net: various APIs
    + reflect: various APIs
    + testlib: various APIs
    + util.concurrent: AsyncCallable, ListenableScheduledFuture,
    and ClosingFuture
    + util.concurrent: ExecutionSequencer,
    MoreExecutors.newSequentialExecutor, and Monitor
    + util.concurrent: Futures methods: submit, submitAsync,
    scheduleAsync, nonCancellationPropagating, inCompletionOrder
    + util.concurrent: Uninterruptibles:
    awaitTerminationUninterruptibly and the Duration overloads in
    the class
    + util.concurrent: the FluentFuture type, its factory methods,
    and addCallback
  * Remove the hack of removing annotations, since we have now
    all the required dependencies packaged
- Removed patch:
  * donotmock.patch
    + hack not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1686830400">- Upgrade to guava 32.0.1
  * Security fixes:
    + Reimplemented Files.createTempDir and FileBackedOutputStream
    to further address CVE-2020-8908 (#4011, bsc#1179926) and
    CVE-2023-2976 (#2575, bsc#1212401)
  * Fixes:
    + io: Fixed Files.createTempDir and FileBackedOutputStream under
    Windows, which broke as part of the security fix in release
    32.0.0
    + Removed @Beta from almost all APIs. Most of the remaining
    @Beta APIs are in graph and hash.
    + Enhanced the Guava jar to include Proguard configurations that
    are picked up automatically by the Android Gradle Plugin. This
    should help with warnings that were promoted to errors in
    Android Gradle Plugin 8.x.
    + Enhanced the Guava jar to include information about method
    parameters in its class files. If you use static analyzers
    that look at method-parameter names, you may see new warnings
    or errors if they are now able to detect mismatches. But
    mostly, you may see better tooltips and autocompletion in
    DEs.
    + Improved nullness annotations on a few classes.
    + Modified classes with "serial proxies" to declare
    exception-throwing readObject methods, in accordance with best
    practice.
    + collect: Fixed Maps.newHashMapWithExpectedSize to stop
    allocating maps that were larger than they needed to be.
    + collect: Made various APIs work J2CL:
    Maps.immutableEnumMap+toImmutableEnumMap, EnumMultiset,
    CollectorTester. Previously, the APIs were present but failed
    at runtime.
    + collect: Optimized memory usage for Interner and MapMaker.
    + graph: Changed directed graphs to reject attempts to add
    undirected edges.
    + io: Added BaseEncoding.ignoreCase() to support
    case-insensitive decoding.
    + net: Added HttpHeaders constants:
    ~ No-Vary-Search
    ~ Sec-CH-DPR
    ~ Sec-CH-UA-Wow64
    ~ Sec-CH-Viewport-Width and Sec-CH-Viewport-Height
    ~ Supports-Loading-Mode
    + net: Added the MediaType constant for JWT.
    + primitives: Added rotate() for arrays of all primitive types.
    + util.concurrent: Changed AbstractFuture to run
    interruptTask() just before afterDone(). Until this change, it
    ran slightly earlier than that: We used to run it before
    unblocking any pending get() calls, and now we run it after.
    + util.concurrent: Fixed some cases in which we could catch
    InterruptedException but fail to restore the interrupt bit.</changelog>
</package>
<package pkgid="87d5a7c28ee4310e0321642249f32a16e6d446365e725523a38aa7ce59746af5" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="45880e0ea71c5082405acc666cee66f095f49538621c9b96f2158aef04205ef1" name="hwdata" arch="src">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="0f18e41881c6e83ec59072f6a507004154b8dc400293e9b5b6094b16e5a4e41c" name="hwinfo" arch="aarch64">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="12688aefae4232e80e22ec97428a4eadb57964551282a7fcc47f56cbaa388e93" name="hwinfo" arch="ppc64le">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="20b6cec4b5654b4ad4327d3cf96596aa304d9d083fd1df152478d65acc34f1e6" name="hwinfo" arch="s390x">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="fa21f8db00f8fc4845f93b65b5a67127947cf7a74119838156baeada0c7f1893" name="hwinfo" arch="src">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="248d27cffa25954d90e6da2d285dea26217d60f2ebbdf8a8b04d4cd6a25a0621" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="39e78efbae77162b0cfe2b0b36ed0a66646c40fd42033a11ae2686478a2bdfa6" name="hwinfo-devel" arch="aarch64">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="717a41a530ddb75e4aeaa3df312f51adfb84f69f67e363b243766ea1d14908b1" name="hwinfo-devel" arch="ppc64le">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="89deaf8c7950669b15a7ee6b504474e794276a1b2db825da1ea2122aa6f2a3e2" name="hwinfo-devel" arch="s390x">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="353aa73c32eb75ec9f87e1202bbb1fff095979f6d3412e998ae162fdbb5a5039" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.85" rel="150500.3.3.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="753388ad58976099106d7647a74f504cae55aae01afdd30a750d36e06233c488" name="hwloc" arch="aarch64">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="8a67f41de0de27b26900e9ec412329874ed17e5b4147b814c20fd2c5d848f181" name="hwloc" arch="ppc64le">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="5d31749d901292f09bd158f15cde6ed915e1c4aa6c94223e2bfd06a781c3e98d" name="hwloc" arch="s390x">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="f6519914e0ff2c28032c38ffa30b3776d14f97abf34cc861ca36a13ce80ade12" name="hwloc" arch="src">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="2bb74d11aa131b7416394b540048e4d77bc0bb2d989f365121d6007e8e1f2466" name="hwloc" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="a188ea3be93147b4a4e208b68259716c2ac3e668822d9c7ed7ebcfb5bef12b59" name="hwloc-data" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="2f2abbe02589ae06f04df854f1efb82cf6ea64d816fabddb8d619bba8c18b50b" name="hwloc-devel" arch="aarch64">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="77031d425e5c292da1be7ca6742ed3a568951aaa6cd0848e6af884f1402d540a" name="hwloc-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="8d28157f5fe6fcfa5ce13676c37e9d564de1e38e9d4f56232f68a62d63292160" name="hwloc-devel" arch="s390x">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="83ec184c288450b6d1c69bc5ba347af4019e085d22f0706927f3dde440d936a1" name="hwloc-devel" arch="x86_64">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="434149a217d447cd0b94547feff48024edc62c0db9bb5806f74a4f6268438e6f" name="hwloc-doc" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="150400.3.6.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="thomas.blume@suse.com" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="thomas.blume@suse.com" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update to 2.2.0:
  * API
    + Add hwloc_bitmap_singlify_by_core() to remove SMT from a given cpuset,
    thanks to Florian Reynier for the suggestion.
    + Add --enable-32bits-pci-domain to stop ignoring PCI devices with domain
    &gt;16bits (e.g. 10000:02:03.4). Enabling this option breaks the library ABI.
    Thanks to Dylan Simon for the help.
  * Backends
    + Add support for Linux cgroups v2.
    + Add NUMA support for FreeBSD.
    + Add get_last_cpu_location support for FreeBSD.
    + Remove support for Intel Xeon Phi (MIC, Knights Corner) co-processors.
  * Tools
    + Add --uid to filter the hwloc-ps output by uid on Linux.
    + Add a GRAPHICAL OUTPUT section in the manpage of lstopo.
  * Misc
    + Use the native dlopen instead of libltdl,
    unless --disable-plugin-dlopen is passed at configure time.
- install systemd files using systemd macros and register it on install
  with systemd
- build against libnuma on all architectures</changelog>
  <changelog author="thomas.blume@suse.com" date="1605960000">-  move hwloc manpage to main package (bsc#1178802)</changelog>
  <changelog author="dmueller@suse.com" date="1611489600">- update to 2.4.0:
  + Add hwloc/cpukinds.h for reporting information about hybrid CPUs.
  - Use Linux cpufreq frequencies to rank cores by efficiency.
  - Use x86 CPUID hybrid leaf and future Linux kernels sysfs CPU type
    files to identify Intel Atom and Core cores.
  - Use the Windows native EfficiencyClass to separate kinds.
  + Properly handle Linux kernel 5.10+ exposing ACPI HMAT information
    with knowledge of Generic Initiators.
  + lstopo has new --cpukinds and --no-cpukinds options for showing
    CPU kinds or not in textual and graphical modes respectively.
  + hwloc-calc has a new --cpukind option for filtering PUs by kind.
  + hwloc-annotate has a new cpukind command for modifying CPU kinds.
  + Fix hwloc_bitmap_nr_ulongs(), thanks to Norbert Eicker.
  + Add a documentation section about
    "Topology Attributes: Distances, Memory Attributes and CPU Kinds".
  + Silence some spurious warnings in the OpenCL backend and when showing
    process binding with lstopo --ps.
  + Add hwloc/memattrs.h for exposing latency/bandwidth information
    between initiators (CPU sets for now) and target NUMA nodes,
    typically on heterogeneous platforms.
  - When available, bandwidths and latencies are read from the ACPI HMAT
    table exposed by Linux kernel 5.2+.
  - Attributes may also be customized to expose user-defined performance
    information.
  + Add hwloc_get_local_numanode_objs() for listing NUMA nodes that are
    local to some locality.
  + The new topology flag HWLOC_TOPOLOGY_FLAG_IMPORT_SUPPORT causes
    support arrays to be loaded from XML exported with hwloc 2.3+.
  - hwloc_topology_get_support() now returns an additional "misc"
    array with feature "imported_support" set when support was imported.
  + Add hwloc_topology_refresh() to refresh internal caches after modifying
    the topology and before consulting the topology in a multithread context.
  + Add a ROCm SMI backend and a hwloc/rsmi.h helper file for getting
    the locality of AMD GPUs, now exposed as "rsmi" OS devices.
    Thanks to Mike Li.
  + Remove POWER device-tree-based topology on Linux,
    (it was disabled by default since 2.1).
  + Command-line options for specifying flags now understand comma-separated
    lists of flag names (substrings).
  + hwloc-info and hwloc-calc have new --local-memory --local-memory-flags
    and --best-memattr options for reporting local memory nodes and filtering
    by memory attributes.
  + hwloc-bind has a new --best-memattr option for filtering by memory attributes
    among the memory binding set.
  + Tools that have a --restrict option may now receive a nodeset or
    some custom flags for restricting the topology.
  + lstopo now has a --thickness option for changing line thickness in the
    graphical output.
  + Fix lstopo drawing when autoresizing on Windows 10.
  + Pressing the F5 key in lstopo X11 and Windows graphical/interactive outputs
    now refreshes the display according to the current topology and binding.
  + Add a tikz lstopo graphical backend to generate picture easily included into
    LaTeX documents. Thanks to Clement Foyer.
  + The default installation path of the Bash completion file has changed to
    ${datadir}/bash-completion/completions/hwloc. Thanks to Tomasz Kłoczko.</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- update to 2.4.1:
  * Fix AMD OpenCL device locality when PCI bus or device number &gt;= 128.
    Thanks to Edgar Leon for reporting the issue.
    + Applications using any of the following inline functions must
    be recompiled to get the fix: hwloc_opencl_get_device_pci_busid()
    hwloc_opencl_get_device_cpuset(), hwloc_opencl_get_device_osdev().
  * Fix the ranking of cpukinds on non-Windows systems,
    thanks to Ivan Kochin for the report.
  * Fix the insertion of custom Groups after loading the topology,
    thanks to Scott Hicks.
  * Add support for CPU0 being offline in Linux, thanks to Garrett Clay.
  * Fix missing x86 Package and Core objects FreeBSD/NetBSD.
    Thanks to Thibault Payet and Yuri Victorovich for the report.
  * Fix the import of very large distances with heterogeneous object types.
  * Fix a memory leak in the Linux backend,
    thanks to Perceval Anichini.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.5.0:
  + Add hwloc/windows.h to query Windows processor groups.
  + Add hwloc_get_obj_with_same_locality() to convert between objects
    with same locality, for instance NUMA nodes and Packages,
    or OS devices within a PCI device.
  + Add hwloc_distances_transform() to modify distances structures.
  - hwloc-annotate and lstopo have new distances-transform options.
  + hwloc_distances_add() is replaced with _add_create() followed by
    _add_values() and _add_commit(). See hwloc/distances.h for details.
  + Add topology flags to mitigate binding modifications during
    hwloc discovery, especially on Windows:
  - HWLOC_TOPOLOGY_FLAG_RESTRICT_TO_CPUBINDING and _MEMBINDING
    restrict discovery to PUs and NUMA nodes inside the binding.
  - HWLOC_TOPOLOGY_FLAG_DONT_CHANGE_BINDING prevents from ever
    changing the binding during discovery.
  + Add a levelzero backend for oneAPI L0 devices, exposed as OS devices
    of subtype "LevelZero" and name such as "ze0".
  - Add hwloc/levelzero.h for interoperability between converting
    between L0 API devices and hwloc cpusets or OS devices.
  + Expose NEC Vector Engine cards on Linux as OS devices of subtype
    "VectorEngine" and name "ve0", etc.
    Thanks to Anara Kozhokanova, Tim Cramer and Erich Focht for the help.
  + Add a NVLinkBandwidth distances structure between NVIDIA GPUs
    (and POWER processor or NVSwitches) in the NVML backend,
    and a XGMIBandwidth distances structure between AMD GPUs
    in the RSMI backends.
  - See "Topology Attributes: Distances, Memory Attributes and CPU Kinds"
    in the documentation for details about these new distances.
  + Add support for NUMA node 0 being offline in Linux, thanks to Jirka Hladky.
  + Add --with-cuda-version=&lt;version&gt; or look at the CUDA_VERSION
    environment variable to find the appropriate CUDA pkg-config files.
    Thanks to Stephen Herbein for the suggestion.
  - Also add --with-cuda=&lt;dir&gt; to specify the CUDA installation path
    manually (and its NVML and OpenCL components).
    Thanks to Andrea Bocci for the suggestion.
  - See "How do I enable CUDA and select which CUDA version to use?"
    in the FAQ for details.
  + lstopo now has a --windows-processor-groups option on Windows.
  + hwloc-ps now has a --short-name option to avoid long/truncated
    command path.
  + hwloc-ps now has a --single-ancestor option to return a single
    (possibly too large) object where a process is bound.
  + hwloc-ps --pid-cmd may now query environment variables,
    including MPI-specific variables to find out process ranks.</changelog>
  <changelog author="dmueller@suse.com" date="1638705600">- update to 2.6.0:
  * Backends
    + Expose two cpukinds for energy-efficient cores (icestorm) and
    high-performance cores (firestorm) on Apple M1 on Mac OS X.
    + Use sysfs CPU "capacity" to rank hybrid cores by efficiency
    on Linux when available (mostly on recent ARM platforms for now).
    + Improve HWLOC_MEMBIND_BIND (without the STRICT flag) on Linux kernel
    &gt;= 5.15: If more than one node is given, the kernel may now use all
    of them instead of only the first one before falling back to others.
    + Expose cache os_index when available on Linux, it may be needed
    when using resctrl to configure cache partitioning, memory bandwidth
    monitoring, etc.
    + Add a "XGMIHops" distances matrix in the RSMI backend for AMD GPU
    interconnected through XGMI links.
    + Expose AMD GPU memory information (VRAM and GTT) in the RSMI backend.
    + Add OS devices such as "bxi0" for Atos/Bull BXI HCAs on Linux.
  * Tools
    + lstopo has a better placement algorithm with respect to I/O
    objects, see --children-order in the manpage for details.
    + hwloc-annotate may now change object subtypes and cache or memory
    sizes.
  * Build
    + Allow to specify the ROCm installation for building the RSMI backend:
  - Use a custom installation path if specified with --with-rocm=&lt;dir&gt;.
  - Use /opt/rocm-&lt;version&gt; if specified with --with-rocm-version=&lt;version&gt;
  or the ROCM_VERSION environment variable.
  - Try /opt/rocm if it exists.
  - See "How do I enable ROCm SMI and select which version to use?"
  in the FAQ for details.
    + Add a CMakeLists for Windows under contrib/windows-cmake/ .
  * Documentation
    + Add FAQ entry "How do I create a custom heterogeneous and
    asymmetric topology?"</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 2.7.1:
  * Workaround crashes when virtual machines report incoherent x86 CPUID
    information about numbers of cores and threads.
    Thanks to Peter Bense for the report.
  * Use setenv() instead of putenv() when trying to force enable oneAPI L0
    support, to avoid issues with applications that touch the environment,
    thanks to Josh Hursey for the patch.
  * Add some warnings at the end of configure when GPU libraries are
    missing on the system or their path is missing in the environment.
  * Backends
    + Add support for NUMA nodes and caches with more than 64 PUs across
    multiple processor groups on Windows 11 and Windows Server 2022.
    + Group objects are not created for Windows processor groups anymore,
    except if HWLOC_WINDOWS_PROCESSOR_GROUP_OBJS=1 in the environment.
    + Expose "Cluster" group objects on Linux kernel 5.16+ for CPUs
    that share some internal cache or bus. This can be equivalent
    to the L2 Cache level on some platforms (e.g. x86) or a specific
    level between L2 and L3 on others (e.g. ARM Kungpeng 920).
    Thanks to Jonathan Cameron for the help.
  - HWLOC_DONT_MERGE_CLUSTER_GROUPS=1 may be set in the environment
  to prevent these groups from being merged with identical caches, etc.
    + Improve the oneAPI LevelZero backend:
  - Expose subdevices such as "ze0.1" inside root OS devices ("ze0")
  when the hardware contains multiple subdevices.
  - Add many new attributes to describe device type, and the
  numbers of slices, subslices, execution units and threads.
  - Expose the memory information as LevelZeroHBM/DDR/MemorySize infos.
    + Ignore the max frequencies of cores in Linux cpukinds when the
    base frequencies are available (to avoid exposing hybrid CPUs
    when Intel Turbo Boost Max 3.0 gives slightly different max
    frequencies to CPU cores).
  - May be reverted by setting HWLOC_CPUKINDS_MAXFREQ=1 in the environment.
  * Tools
    + Add --grey and --palette options to switch lstopo to greyscale or
    white-background-only graphics, or to tune individual colors.
  * Build
    + Windows CMake builds now support non-MSVC compilers, detect several
    features at build time, can build/run tests, etc.
    Thanks to Michael Hirsch and Alexander Neumann .</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 2.8.0:
  * API
    + Add HWLOC_TOPOLOGY_FLAG_NO_DISTANCES, _NO_MEMATTRS and _NO_CPUKINDS
    to reduce the overhead when unneeded.
    + Add separate Read/Write Bandwidth/Latency memory attributes and
    implement them on Linux.
  * Backends
    + NUMA nodes may now have a subtype such as DRAM, HBM, SPM, or NVM
    on heterogeneous memory platforms on Linux.
  - Add DAXType and DAXParent attributes on Linux to tell where a
  DAX device or its corresponding NUMA node come from (SPM for
  Specific-Purpose or NVM for Non-Volatile Memory).
    + Detect heterogeneous caches in hybrid CPUs on MacOS X,
    thanks to Paul Bone for the help.
    + Max frequencies are not ignored in Linux cpukinds anymore (they were
    ignored in hwloc 2.7.0), but they may be slightly adjusted to avoid
    reporting hybrid CPUs because Intel Turbo Boost Max 3.0.
  - See the documentation of environment variable HWLOC_CPUKINDS_MAXFREQ.
    + Hardwire the PCI locality of HPE Cray EX235a nodes.
  * Tools
    + lstopo and other tools may now load Linux and x86 cpuid topology files
    from a tarball.
    + lstopo may now replace the P# and L# index prefixes with custom strings
    thanks to --os-index-prefix and --logical-index-prefix options.
  * Misc
    + Add --disable-readme to avoid regenerating the top-level hwloc README
    file from the documentation.
  * Bugfix
  + Use setenv() instead of putenv() - fixes crash in Slurm (bsc#1210227)
    replaces core-levelzero-Set-ZES_ENABLE_SYSMAN-via-setenv-instead-of-putenv.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659096000">- Add libXNVCtrl support on TW</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.9.0:
  + Expose the memory size of CXL memory devices (Type 3) on Linux.
  + The LevelZero backend now reports the "XeLinkBandwidth" distance
    matrix between L0 devices (and subdevices) when available.
  + Add support for CUDA compute capability up to 9.0.
  + lstopo now switches to console mode when its output is redirected.
    Graphical window mode may be forced back with --of window.
  + hwloc-calc now accepts "numa" in -H, and I/O subtypes such as "gpu"
    in -I and -N.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1674734400">- Remove libXNVCtrl support as it brings too many X dependencies
  (bsc#1207545)</changelog>
  <changelog author="thomas.blume@suse.com" date="1683633600">- remove header files for feature we don't ship (jsc#PED-4156)
  These headers do not define an API that is not supported at present and
  therefore would not cause a failure during build. Still, they define static
  inline functions which look for HWLOC objects that are only set up by
  non-supported device scanners. Thus these objects will never be present - even
  though the relevant hardware is.</changelog>
</package>
<package pkgid="2e0f0dc5eaec3b31459de1fceddb90ebff940f097350c3cb3df6929ae11a91b3" name="ibm-data-db2" arch="aarch64">
  <version epoch="0" ver="6.8.0" rel="150200.5.2.5"/>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411200">- Update to version 5.10.0.140 (5.10.0 Stable)
- Remove patch: provides-facades.patch
- Add profiler-aot-parse_args-fix.patch:
  * Fix OBS build failure with "free(): invalid pointer" libc error.
- New features and changes:
  * Interpreter: the interpreter is now compiled in by default into Mono, and you can use it by running mono --interpreter
  * Default Interface Methods: the runtime now supports Default Interface Methods, we now only miss the C# compiler support
  * Mono SDKs: this is a new way of building Mono for some of the platforms that we support: Android, iOS and WebAssembly.
  * WebAssembly port: this is the first release where the interpreter can reliably run most of the class libraries test suite.
  * Dedicated Coverage profiler: the coverage profiler has been extracted from the log profiler, making it much more lightweight
  * ARM Memory Barriers: explicitly encode memory barrier type on ARM64, instead of relying on undefined behaviour according to the ARMv8 ABI
  * AOT Size Reduction via Code Deduplication: we now support deduplicating generics code across assemblies
  * Class Libraries: the recently announced .NET 4.7.1 is now supported and available as a specific target via MSBuild configuration; the System.Data assembly was fully replaced with CoreFX implementation resolving many limitations and corner cases issue we had as well as implementing missing features and APIs; significant parts of System.Security assembly implementation were replaced with CoreFX implementation
  * Roslyn compiler: roslyn compiler has been updated to version 2.6.0 which includes all C# 7.2 features
  * The Mono C# compiler: MCS gained support for some more C# 7.x features
- Bugfixes:
  * bxc#19503 - Process.Start on OS X fails silently for missing file
  * bxc#20562 - Seeming valid IL produces invalid result
  * bxc#40699 - Console.ReadXXX does not echo input after TermInfoDriver is initialized
  * bxc#45893 - I18N: EncoderFallbackBuffer.Fallback gets next character instead of the current one
  * bxc#50189 - SGEN XMM scanning: Linux/Intel (32 + 64)
  * bxc#50190 - SGEN FPU scanning: Darwin/ARM64
  * bxc#52675 - HttpListener doesn’t work with SSL
  * bxc#53296 - Latin1Encoding throws exception on Mono when it doesn’t on MS.NET
  * bxc#56003 - URI returns wrong absolute path on OSX when File name is UTF-8
  * bxc#56194 - SIGSEGV on System.Runtime.CompilerServices.RuntimeHelpers.InitializeArray()
  * bxc#56727 - Runtime crashes when disposing DeflateStream
  * bxc#57892 - Static lib in the msi distrib doesn’t resolve all symbols
  * bxc#57893 - mkbundle is not working on Windows
  * bxc#57938 - Differences in behavior Type.Fullname in Mono and .NET Framework when Type is a generic type that is not a generic type definition but contains unresolved type parameters
  * bxc#58400 - System.Uri broken with files
  * bxc#58411 - System.Security.Cryptography.CryptographicException: Store root doesn’t exist
  * bxc#59080 - Type information of underlying type for enums compiled by Mono.CSharp.dll seems to be incorrect
  * bxc#59182 - Crash/SIGSEGV with interop callback with struct parameter from native to managed on Xamarin.Android on armv7
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59393 - NullReferenceException when MonthCalendar clicked out of min/max date
  * bxc#59608 - Attribute MethodImplOptions.AggressiveInlining causes method to always return NULL
  * bxc#59664 - Type.GetType(“”, true) throws ArgumentException on Mono but TypeLoadException on .NET
  * bxc#59832 - [iOS]MT3001 error: Could not AOT the assembly error while building iOS/mobile samples
  * bxc#59881 - DllImport calls a wrong function if its function number greater than 65535
  * bxc#59909 - WebInvokeAttributeTest.RejectTwoParametersWhenNotWrapped() fails on Android
  * bxc#59916 - get_current_locale_name fails under the load with String conversion error: Illegal byte sequence encounted in the input
  * bxc#59956 - [llvm][bitcode] [FAIL] UniqueIdTest.Ctor_Id (System.Runtime.Serialization tests)
  * bxc#60028 - Timer doesn’t throw ODE after Dispose()
  * bxc#60029 - AsyncLocal inconsistency with .NET
  * bxc#60175 - AOT mis-compiles when coverage is used
  * bxc#60224 - Coverage profiler uses type names which don’t exist
  * bxc#60233 - Assertion in dynamic-image.c after 792b5367cd3a6ffa1a192c4d2d7ace3509cbb646
  * bxc#60238 - Mono assertion hit when using csharp repl
  * bxc#60255 - Wrong exception in emulated opcodes
  * bxc#60267 - Inconsistent symlink traversal results
  * bxc#60288 - Large Array Initializer Causes TypeLoadException
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60317 - Stuck WebRequest
  * bxc#60422 - Native crash due to unhandled errno values when accessing files on networked filesystems
  * bxc#60435 - The DataGridViewRow.CreateCellsInstance method is never invoked
  * bxc#60539 - mini-codegen.c:1265, condition `reginfo [sreg].born_in &gt; 0’ not met
  * bxc#60545 - Multiple argument generic with contravariant interface as an argument causes MissingMethodException
  * bxc#60621 - XmlDocument.Load() throws WebException when DTD url is not reachable
  * bxc#60634 - Assertion failure ‘align &gt; 0’ happening as of d15-5
  * bxc#60680 - C# 7 ref returns fail to compile
  * bxc#60771 - Attempting to JIT compile method ‘System.Runtime.CompilerServices.Unsafe:Add (byte&amp;,int)’ while running in aot-only mode
  * bxc#60865 - * Assertion at mini-codegen.c:2264, condition `sp &gt; 0’ not met
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6414 - sbyte comparison broken by optimization
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6721 - Negate operation on uint.MaxValue gives wrong result on arm64
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108.
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6848 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411201">- Add xbuild-use-roslyn-vbc.patch:
  * Make xbuild to use roslyn-vbc on roslyn-enabled builds instead of deprecated vbnc (it is also broken on roslyn-enabled builds)</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1524052800">- Update to version 5.10.1.47 (5.10.1 Stable)
- Patch updated: ucontext.patch</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534075200">- Release 5.12.0.226 (skipped):
- New features and changes:
  * Interpreter: a lot of work has been put in stabilising and passing test suite. Interpreter is able to build the full Base Class Library with Mono C# compiler (mcs)
  * IBM AIX, IBM i, Haiku ports
  * WebAssembly: several issues were fixed around GC and Base Class Libraries
  * Jemalloc: added option to support jemalloc as the malloc(3) library, need --with-jemalloc build options
  * Profiler: improved GC roots reporting
  * PAL: added support for nanosecond resolution in file information on platforms where the information is available
  * Diagnostic enhancements: the diagnostic support to inspect generated native code via MONO_VERBOSE_METHOD environement variable was extended to support multiple entries
  * Class Libraries: HttpWebRequest async handling has been rewritten
  * Class Libraries: a few internal types were decorated with StackTraceHiddenAttribute
  * Class Libraries: System.Security.Cryptography.Xml namespace in the System.Security assembly has been replaced with the CoreFX implementation
  * Class Libraries: ICSharpCode.SharpZipLib assembly was marked as obsolete and will be removed in a future release
  * illinkanalyzer tool: a new tool called the Linker Analyzer was introduced, available via the illinkanalyzer command
  * VB.NET compiler: Roslyn based VB.NET compiler (vbc) now shipped with package. Old vbnc compiled will be deprecated.
- Bugfixes:
  * bxc#41294 - Some Mono threadpool performance counters return 0
  * bxc#45901 - Missing .NET code pages ibm775 &amp; ibm737
  * bxc#56071 - Mono.Security.AuthenticodeBase Doesn’t Support PE32+ image format
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60225 - Coverage output is missing some types and methods
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60359 - AssemblyName.set_CultureName is not implemented
  * bxc#60568 - WaitHandle.WaitOne(int) doesn’t trigger SynchronizationContext.Wait
  * bxc#60756 - A crash with CEE_RET: value type stack: 0 vs. 8
  * bxc#60848 - Incorrect unicode custom attribute decoding
  * bxc#60862 - Stack overflow throws null (null is caught)
  * bxc#60900 - Error using implicit operator with Nullable
  * bxc#60986 - Memory leak when marshalling Delegate to native code
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6264 - Creating a new instance of X.509 certificate out of another, empty instance of X.509 certificate must not throw
  * gh#mono/mono#6283 - Mono is not able to notice a file change in a FileInfo object
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6343 - mono/utils/jemalloc does not exist
  * gh#mono/mono#6349 - messages during make dist: “file name is too long”
  * gh#mono/mono#6379 - Reenable System.Runtime.CompilerServices.Unsafe-xunit test on 32bit
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6411 - System.Numerics structs are incorrect sizes
  * gh#mono/mono#6464 - Socket.Send misses data on Windows
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#xamarin/maccore#628 - mscorlib/Mac/Full: LocalId (MonoTests.System.TimeZoneInfoTest+PropertiesTests.LocalId) fails
  * gh#xamarin/maccore#629 - iOS 32-bit sim: TimeZoneTest.TestCtors (D02) fails</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534161600">- Update to version 5.14.0.177 (5.14.0 Stable)
- Remove patch: profiler-aot-parse_args-fix.patch
- Patch fix-dbg-headers.patch was updated
- Added patch: fix-ppc-64bit-portability-issue.patch:
  * Fix 64bit-portability-issue OBS error when compiling for PPC arch
- New features and changes:
  * Better generic sharing: generic sharing has been improved
  * Memory optimization for handles: reduce the amount of preallocated memory when process requires only a minimal number of handles
  * GC Handling of very large objects: fix handling of objects which are over 4GBs of memory
  * Class Libraries: significant improvements to System.Windows.Forms
  * MCS: C# 7.x support was extended
  * NuGet: the bundled version of NuGet has been updated to 4.7.0
  * mkbundle: a new --mono-api-struct-path option was introduced to allow customization of runtime functions used for the embedding
- Bugfixes:
  * gh#mono/mono#6178 - Log profiler should provide startup time in stream header from same source as event timestamps
  * gh#mono/mono#6186 - Code coverage instrumentation logic should deal with inlining the same way as enter/leave instrumentation
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6211 - Rare shutdown crash in profiler stress tests
  * gh#mono/mono#6266 - ArrayTypeMismatchException when using array of generic ICollection or IList
  * gh#mono/mono#6357 - Keepass crashes when editing an entry notes field in a specific way
  * gh#mono/mono#6579 - Type.GetInterface fails to find implemented interface when ignoreCase: true is used
  * gh#mono/mono#6666 - Invalid cast is not checked for nullable types
  * gh#mono/mono#6752 - System.TermInfoReader cannot handle new NCurses 6 TermInfo files
  * gh#mono/mono#6767 - Add missing APIs to System.Data
  * gh#mono/mono#6788 - nuget restore fails to parse valid json from nuget.org with mono/master
  * gh#mono/mono#6801 - Self-hosted HttpListener gets empty file collection and input stream for multipart PUT or POST requests
  * gh#mono/mono#6812 - MonoProfilerCoverageData::column is equal 0
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#6999 - test_0_time_drift - mono/tests failure
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7093 - Regression in Array interface conversions
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7134 - NullReferenceException while processing concurrent requests with a WCF app
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7145 - [XI] RuntimeFeatureTest.NoNewFeaturesAdded failure in mscorlib tests
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path.
  * gh#mono/mono#7199 - finalizer-abort.exe
  * gh#mono/mono#7200 - Problem building on Arch linux
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7328 - suggest recursive self-calls do not create trampoline
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7378 - WeakAttribute causes all fields within a class to become weak
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7408 - No longer builds with CentOS 6 (GCC 4.4.7)
  * gh#mono/mono#7432 - gcsuppressfinalize.exe CoreCLR test started failing after upgrade to Debian 9
  * gh#mono/mono#7449 - PInvoke to function that takes a struct with an array of double gets incorrect results on Android
  * gh#mono/mono#7460 - w32handles require much memory when the minimum required is much lower
  * gh#mono/mono#7535 - [llvm/bitcode] Crash in mono_class_has_failure (class.c:10037)
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7537 - new object [int.MaxValue] crashes runtime instead of OOM
  * gh#mono/mono#7565 - Generic symbol names exported from libmono
  * gh#mono/mono#7568 - Intermittent failures on bug-80307.exe and other tests using FileSystemWatcher
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7613 - mprof-report can’t read v13 file that Mono.Profiler.Log can
  * gh#mono/mono#7620 - DrawToBitmap in Control.cs does not work
  * gh#mono/mono#7624 - Strict loader still loads incorrect assembly
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7657 - Method is inaccessible from method in nested classes with inheritance.
  * gh#mono/mono#7661 - Suppress the degraded allocation warning for the WebAssembly target
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7696 - LINQ bug (ConcatNIterator.ToArray()?)
  * gh#mono/mono#7729 - [mcs] fails to compile code with Tuple
  * gh#mono/mono#7786 - “mono/metadata/threads.c:3016, condition `internal’ not met” under certain conditions with the soft debugger attached
  * gh#mono/mono#7792 - Failure to AOT compile due to condition `load_opcode != OP_LOADV_MEMBASE’ not met
  * gh#mono/mono#7805 - F# build is broken due to new String.StartsWith overload
  * gh#mono/mono#7822 - Failing to serialize ConcurrentDictionary with BinaryFormatter
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7860 - illinkanalyzer isn’t whitelisted in the macOS package
  * gh#mono/mono#7864 - [wasm] Don’t fail when TaskCreationOptions.LongRunning is used
  * gh#mono/mono#7903 - Mono VS solution has wrong all projects in all profiles used
  * gh#mono/mono#7920 - build broken with –enable-minimal=soft_debug
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * bxc#10087 - Process exit can be blocked if the AppDomain.ProcessExit event hangs
  * bxc#11771 - IsolatedStorageFile.GetFileNames() throws exception w/ nested dirs
  * bxc#12850 - FtpWebRequest does not handle remote paths properly
  * bxc#18941 - Calling Marshal.SizeOf() with an Empty struct using Sequential or Explicit returns 0
  * bxc#19038 - Quitting XS caused MainStoryboard.Storyboard to convert to IB file
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#25224 - stack overflow after printfn something
  * bxc#25444 - WCF method with UriTemplate annotation fails with InvalidOperationException
  * bxc#33208 - System.Reflection.Module.ResolveMember() returning inconsistent results when querying dynamic assemblies
  * bxc#46473 - Error: The object with ID N implements the IObjectReference interface for which all dependencies cannot be resolved. The likely cause is two instances of IObjectReference that have a mutual dependency on each other
  * bxc#53272 - Unhandled Exception System.Collections.Generic.KeyNotFoundException in ikdasm
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59400 - Wrong interface method is called (two interfaces, covariance)
  * bxc#59779 - HttpClient, when using GZIP, hangs while sending multiple requests in parallel.
  * bxc#60065 - Make exception marshaling work with system mono
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60843 - Type 0x15 not handled in custom attr value decoding</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1541678400">- Update to version 5.16.0.179 (5.16.0 Stable)
- Remove patch: fix-64bit-portability-issue.patch
- New features and changes:
  * LLVM: a new option llvmopts has been added to allow override the built-in set of flags passed to the LLVM optimizer
  * Response files support: a response file is a plain-text file that contains strings to be treated as arguments for mono runtime, activated with "--response=FILE" option
  * Assembly loader: the loading of mixed strong named and non-strong names assemblies has been improved to further match .NET desktop behaviour
  * Hybrid suspend: hybrid suspend is a new mechanism that Mono’s garbage collector may use to pause threads when during garbage collection
  * 32-bit floating operations: performing 32-bit floating operations using 32-bit math is now the default settings for the runtime
  * The debugger library: the runtime can be configured using --enable-minimal=soft_debug option and the debugger code will be compiled into a separate libmono-dbg.a library. The library needs to be linked into the app if needed
  * Custom modifiers enhancements: fixed a few issues in handling custom modifiers, especially around type equality with custom modifiers
  * Optimizations: various optimizations for Span&lt;T&gt;, ReadOnlySpan&lt;T&gt;, EqualityComparer&lt;T&gt;.Equals, Enum.HasFlags
  * CoreFX convergence: fully replaced System.Xml.Linq, System.Json, System.Threading.Tasks.Dataflow, System.ServiceModel.Syndication assemblies and System.Net.Mail, System.ComponentModel, System.Text.Encoding namespaces
  * Client certificate support: added support for client certificates for authentication as well as making requests to web servers that use TLS renegotiation
  * System.MathF type: the single-precision math operations are now available in a new System.MathF class
  * Prettier exception stack-traces: prettier exception printer, especially for generated code stack traces, improvements for async exceptions
  * Mono.Options: the arbitrary command nesting is now supported
  * C# compiler: the Roslyn compiler (csc) has been updated to version 2.8.2 which includes C# 7.3 support
  * sn: the sn tool, the utility for signing assemblies, has been updated to support signing PE32+ assemblies
  * mkbundle: mkbundle has been extended to allow further customization of Mono runtime initialization sequence
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#6173 - Periodic heapshot mode calculates time difference incorrectly
  * gh#mono/mono#6466 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing on newer Ubuntu
  * gh#mono/mono#6647 - Jagged arrays cannot be cast to IList&lt;&gt;
  * gh#mono/mono#6834 - Frequent timing out of the ‘monitor-abort’ tests on CI
  * gh#mono/mono#6936 - Mono runtime doesn’t check modreqs for overriding methods
  * gh#mono/mono#7058 - [interp] pinvoke.exe is flaky
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7247 - CoreFX System.Text namespace
  * gh#mono/mono#7260 - StackTrace.GetFrames() does not return frames from captured traces
  * gh#mono/mono#7305 - Stack overflow when hosting a WCF service when contract interface inherits other interfaces
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7402 - [interp] fix System.Threading.ThreadTest.Test_Interrupt
  * gh#mono/mono#7525 - Profiler exception clause reporting is broken
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7649 - Exception stacktrace is null when task delegate is created from local function
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7683 - Assertion at /Users/builder/data/lanes/5808/1c6f300e/source/xamarin-macios/external/mono/mono/profiler/log.c:546, condition `mono_lls_insert (&amp;log_profiler.profiler_thread_list, hp, &amp;thread-&gt;node) &amp;&amp; “Why can’t we insert the thread in the LLS?”’ not met
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7716 - mono’s mscorlib.xml descriptor file seems incomplete for Xamarin.Mac
  * gh#mono/mono#7731 - MKBundle fails on Windows due to a folder check/missing folder
  * gh#mono/mono#7785 - Dead link (404) in a runtime execution engine exception
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7944 - CreateDelegate produces delegate wrapping incorrect method
  * gh#mono/mono#7947 - Missing forwarders from System.Runtime.Extensions
  * gh#mono/mono#8036 - Update API diff to ignore more attributes
  * gh#mono/mono#8074 - signing problems in preset fullaot build
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8112 - Wrong maximal instruction length of instruction tailcall_membase on ARM64
  * gh#mono/mono#8122 - CoreFX System.Xml.Linq
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8149 - Assembly.LoadFile and Assembly.LoadFrom have same behavior
  * gh#mono/mono#8175 - Changing eglib doesn’t rebuild mono
  * gh#mono/mono#8177 - [wasm] master broken due to WASM-ERR: missing function: mono_debugger_agent_init
  * gh#mono/mono#8218 - SN fails when signing x64 assemblies
  * gh#mono/mono#8250 - assertion failure fullaot llvm System.Drawing.dll
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8282 - [android] respect maximum length of a message when using __android_log_write ()
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8321 - Build break/test failures on FullAOT+LLVM configuration
  * gh#mono/mono#8329 - mono –interpreter got * Assertion at ..\mono\mini\interp\interp.c:3557, condition `csig-&gt;call_convention == MONO_CALL_DEFAULT’ not met
  * gh#mono/mono#8340 - Issue with black text on console, possibly ncurses
  * gh#mono/mono#8356 - Hybrid suspend: backtrace in GC Unsafe mode considered harmful (on Linux)
  * gh#mono/mono#8372 - unload-appdomain-on-shutdown.exe flaky test
  * gh#mono/mono#8407 - TypeDescriptorTest.TestCreateDesigner and TestGetAttributes broken on FullAOT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8422 - Ambiguous call Encoding.GetByteCount(char[], int, int) and Encoding.GetByteCount(string, int, int)
  * gh#mono/mono#8430 - Fails to compile without AOT (enable-minimal=profiler,debug,aot)
  * gh#mono/mono#8447 - ilasm can’t assemble vbbyrefstr parameters
  * gh#mono/mono#8469 - API/Project Files diff renderer stops at XML end comment –&gt;
  * gh#mono/mono#8473 - ThreadPoolTests.PerformanceCounter_WorkItems fails occasionally
  * gh#mono/mono#8488 - Doesn’t compile with Clang on ARM64
  * gh#mono/mono#8572 - Build fails on Redhat 6.8 with GCC 4.4.7
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8587 - configure.ac G_HAVE_ISO_VARARGS problems
  * gh#mono/mono#8597 - System.Reflection.Emit: ParameterBuilder.SetConstant(value) throws ArgumentException for nullable value typed parameters
  * gh#mono/mono#8623 - Complete the System.Memory types import
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * gh#mono/mono#8701 - AOT failure if ref readonly with generics is used
  * gh#mono/mono#8712 - FileSystemWatcher only works for one instance
  * gh#mono/mono#8721 - System.Threading.Tasks.TaskFactoryTests.FromAsync_BeginCallback failing under XM with 2018-04
  * gh#mono/mono#8726 - Loading denied assemblies via Assembly.LoadFrom can cause issues, eg. for VSMac
  * gh#mono/mono#8759 - Build of Master fails with GCC 4.4.7
  * gh#mono/mono#8787 - ThreadPrincipalTests.PrincipalFlowsToAsyncTask failure on device
  * gh#mono/mono#8820 - [loader] Mono is too strict when checking for already loaded assemblies.
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#8866 - jit profiler option crashes iOS apps
  * gh#mono/mono#8897 - “Microsoft.Managed.Core.targets” is missing from roslyn-binaries
  * gh#mono/mono#8915 - Using BinaryFormatter to deserialize an array in a struct in a parent class fails with unfriendly exception [reproducible test case i promise]
  * gh#mono/mono#8979 - configure script incorrectly assumes functions are available with some conditions
  * gh#mono/mono#9002 - ServiceControllerTest.cs is designed to fail.
  * gh#mono/mono#9023 - Two ValueType properties initialization inline fails in mono-wasm
  * gh#mono/mono#9031 - HttpWebRequest.EndGetRequestStream throws wrong exception on abort
  * gh#mono/mono#9033 - DynamicMethod creation fails with “method arguments are incompatible”
  * gh#mono/mono#9179 - CI build breakage for 2018-04, msbuild
  * gh#mono/mono#9234 - [System]: Renegotiation in AppleTls requires OS X 10.12+
  * gh#mono/mono#9277 - Cannot get the exit code from a non-child process on Unix (on Windows)
  * gh#mono/mono#9318 - watchOS: “fastcc” not supported with Xcode 10’s clang
  * gh#mono/mono#9753 - [loader] LoadFile from application base should load in default context
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9869 - iOS: mini test failure in release/llvm mode (JitTests.Math: Expected: 0 But was: 1)
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9996 - The type initializer for ‘System.Data.Entity.Core.Objects.ELinq.ExpressionConverter’ threw an exception. (regression in Mono 5.14)
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#23668 - System.Net.Http.Formatting should not contain Newtonsoft.Json
  * bxc#26983 - Console properties might deadlock for background properties
  * bxc#46917 - Incorrect validation checks in message formater
  * bxc#60065 - Make exception marshaling work with system mono</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1550145600">- Update to version 5.18.0.240, release skipped
- New features and changes:
  * AOT: Few hard to track race conditions in trampolines unboxing for AOT backend targetting amd64 were fixed
  * Interpreter: Added low-level optimizations, support Xamarin native types (nint/nuint)
  * Custom Marshalers: The logic handling custom marshalers, types implementing IICustomMarshaler has been mostly rewritten
  * Optimizations: The intrinsics built on top of SSE41 for Math.Round/Math.Floor/Math.Ceiling were added
  * Windows: Mono Windows cross-compiler is using the same LLVM release branch as Linux resolving issues in scenarios where llvm-config.exe can’t be run (none WSL/CygWin build target)
  * CoreFX convergence: more CoreFX code was imported in particular in System.Reflection namespace, Many common types in mscorlib System namespace are now fully CoreFX based including System.Math
  * Mono.Options: A new CommandSet.GetCompletions() method was introduced
  * System.Runtime.InteropServices: It’s now possible to use RuntimeInformation API to detect ARM and ARM64 platforms
  * MSBuild: Reference assemblies for .NET 4.7.2 are included to allow targeting .NET Framework 4.7.2 using MSBuild on Mono
- Bugfixes:
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1555070400">- Update to version 5.20.1 Stable (5.20.1.19)
- Patch fix-dbg-headers.patch was updated
- Patch ucontext.patch was removed
- Added libtest.patch from upstream: fix build failure
- New features and changes:
  * System.Data: the support for SSPI (Security Support Provider Interface) in System.Data assembly has been added. Additional package (krb5) needs to be installed in order to use this feature.
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10735 - mono64[80780:1186894] error: * Assertion: should not be reached at debugger-agent.c:6619
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10834 - Error loading generic override of in parameter
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11317 - Unexpected behaviour of DateTime.ToString with Korean language on iOS/Android
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * gh#mono/mono#11956 - os-event-unix.c:82 assert(event) failure
  * gh#mono/mono#11965 - [iOS/32bit/device] mscorlib test failures: DoubleFormatterTest.TestFormatStringsN# and DoubleTest.LongLongValueRoundtrip
  * gh#mono/mono#12069 - MethodInfo.ReturnParameter.IsDefined(type) throws IndexOutOfRangeException
  * gh#mono/mono#12130 - [watchOS] MT3001: Could not AOT the assembly mscorlib.dll
  * gh#mono/mono#12235 - Crash while profiling roslyn compiler server
  * gh#mono/mono#12344 - FastCopy may silently fail to do anything
  * gh#mono/mono#12362 - Problem with DefaultValueAttribute and Color values
  * gh#mono/mono#12421 - Task calls SynchronizationContext.Post on cancelling
  * gh#mono/mono#12461 - ReflectionModelServices.IsExportFactoryImportDefinition should not throw
  * gh#mono/mono#12724 - xtro-sharpie.exe crashes with “Cannot transition thread 0x10c3ef5c0 from STATE_BLOCKING with DO_BLOCKING”
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8225 - Mono mkbundle output executable throws: “Error mapping file: No error”
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9418 - SslStream.AuthenticateAsClient throws wrong exception types
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9951 - cross build regressed wrt System.Native and “shm_open that works well enough with mmap”
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133266).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1574251200">- update to new version 6.4.0
- removed libtest.patch because it was fixed upstream
- New features and changes:
  * Highlights
    C# compiler support for C# 8 language version
    .NET Standard 2.1 support
    Updated libgdiplus to 6.0.2
    Notarized macOS installer package
  * Hardened Runtime and Notarization support on macOS
    The Mono binary installed by the .pkg for macOS is now using the Hardened Runtime capabilities and the package was notarized to comply with Apple’s new restrictions: https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution.
    This allows the package to work on the upcoming macOS 10.15 Catalina without showing warning dialogs.
  * Interpreter improvements
    The Mono interpreter was updated to support the Windows operating system.
    We also completed a lot of groundwork for upcoming future optimizations in the interpreter, like constant folding.
  * Bitness independent AOT cross compiler
    The Ahead-Of-Time (AOT) cross compiler was updated to no longer require being executed with the same bitness that it should generate code for. This means a 64bit Mono can now emit AOT code for 32bit targets.
    This work was mainly done to support executing the AOT cross compiler on macOS 10.15 Catalina (which is 64bit only) as we still need to generate code for 32bit targets like older iPhone and Apple Watch devices.
  * WebAssembly
    We continue to work on making our WebAssembly support better. Various sets of issues with the debugger have been resolved in this release and general performance and feature work is happening as well.
  * LLVM improvements
    We now leave it up to the LLVM framework to insert safepoints. Later optimizations can understand safepoints then which leads to better generated code. See https://github.com/mono/mono/pull/11789
    The LLVM backend is also supported on the Windows operating system now.
  * PPC JIT optimizations
    The PowerPC JIT received a bunch of optimization from community contributor Calvin Buckley (@NattyNarwhal).
  * Experimental build support for Fuchsia
    A very minimal and experimental support for building Mono targeting the Fuchsia OS landed in the build system.
  * .NET Standard 2.1 support
    We updated our class libraries to support the latest additions to .NET Standard. You can now run a library compiled against the .NET Standard 2.1 specification on Mono.
  * CoreFX integration
    We continued to replace some of our classes with the implementation from CoreFX to improve performance and compatibility with .NET.
  * libgdiplus update to 6.0.2
    The libgdiplus native library is used for implementing System.Drawing on Unix platforms. This release contains many important improvements from our community members.
  * System.Windows.Forms
    More fixes and layout improvements for different controls made by external contributors have landed in this release .
  * C# 8 language version support in csc and msbuild
    The C# compiler and msbuild tooling were updated to versions that support the final C# 8 language specification.
    The Default Interface Methods (DIM) feature also received a few runtime enhancements.
  * NuGet
    Bundled NuGet version has been upgraded to 5.2 RTM.
- Resolved Issues
  * gh#mono/mono#7377 - [Mono.Debugger.Soft] Connections are not properly closed
  * gh#mono/mono#7452 - Download link for macOS is osbsolete (5.8 instead of 5.10)
  * gh#mono/mono#7845 - Don’t install monograph
  * gh#mono/mono#8360 - [System.Net.Sockets] flakey failures of SocketTest.TestSelect1 on Darwin systems
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8747 - FileSystemWatcher calls event after it is Disposed
  * gh#mono/mono#9267 - Release tarballs should be compressed with xz
  * gh#mono/mono#9621 - 64 bit cross compilers targeting 32 bit platforms
  * gh#mono/mono#9664 - DateTime.Now or Timezone information do not transition out of DST for all time zones
  * gh#mono/mono#10101 - ref local of jagged array leads to InvalidProgramException
  * gh#mono/mono#10277 - [Reflection] Event accessors don’t inherit ReflectedType
  * gh#mono/mono#10645 - WebException is thrown when reading from WebException.Response.GetResponse() stream
  * gh#mono/mono#11431 - Add Brotli compression to existing System.IO.Compression assembly
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11643 - mkbudle problem - Illegal byte sequence
  * gh#mono/mono#12157 - new DriveInfo(Path.GetTempPath()) crashes on macOS
  * gh#mono/mono#12182 - LLVM AOT caches require SSE4.1-capable CPU
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12839 - [Windows] block_guard_restore_aligment_on_exit.exe frequently times out on CI
  * gh#mono/mono#12843 - Mono Android debugger crashes using HttpClient wrapped in Async Method
  * gh#mono/mono#12871 - wasm var co = new System.Net.CookieContainer(); error System.DllNotFoundException: libc
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#12945 - corlib-xunit tests taking 10x longer in the coop configuration
  * gh#mono/mono#12964 - [debugger][wasm] Assertion at mono/metadata/loader.c:2500, condition ‘' not met
  * gh#mono/mono#12981 - [WASM] Transform.c:2856, condition `' not met
  * gh#mono/mono#12988 - [WASM] LLVM failed for ‘ObservableCollectionExtensions.InternalUpdate’: incoming phi sreg1
  * gh#mono/mono#12998 - [WASM] llvmonly-runtime.c:804, condition `' not met
  * gh#mono/mono#13028 - FSharpType.IsUnion broken inside of F# Interactive due to missing System.Reflection.Emit.AssemblyBuilder.ReflectionOnly implementation
  * gh#mono/mono#13030 - Directory.GetLogicalDrives () missing SystemNative_GetAllMountPoints pal function
  * gh#mono/mono#13056 - AV inside mono_local_cprop+0x23f
  * gh#mono/mono#13150 - [WinForms] Related Forms closing
  * gh#mono/mono#13163 - Task: Use async DNS resolution in Socket and web stack code.
  * gh#mono/mono#13195 - [wasm][ci] Intermittent failures with ChakraCore Tests
  * gh#mono/mono#13224 - iOS SDKs test app build doesn’t work when not in sdks/ios directory
  * gh#mono/mono#13231 - CGPattern causes “Attempting to JIT compile method” exception since VS 7.5
  * gh#mono/mono#13250 - Setting CustomErrorsMode for RemotingConfiguration throws NotImplementedException
  * gh#mono/mono#13261 - [sdb] StackOverflow when invoking many methods from client debugger
  * gh#mono/mono#13282 - [SWF] Method OnClosed should pass FormClosedEventArgs type, instead of EventArgs
  * gh#mono/mono#13284 - Checked ulong relational operation throws wrong OverflowException on armeabi-v7a
  * gh#mono/mono#13297 - [WASM] decompose.c:1471, condition `cfg-&gt;cbb == first_bb’ not met
  * gh#mono/mono#13311 - [sdb] Failure to suspend
  * gh#mono/mono#13319 - Crash executing static methods on interfaces
  * gh#mono/mono#13350 - MemberInfo.ReflectedType returns wrong reflected type for an event method
  * gh#mono/mono#13374 - Crash executing default implemented property in interface
  * gh#mono/mono#13412 - Bump netstandard.dll assembly version to 2.1
  * gh#mono/mono#13445 - Fork regression in Mojave due to MAP_JIT
  * gh#mono/mono#13452 - [Linux] Mono (5.18.0.268) crashes in String:IndexOf(char value, int startIndex)
  * gh#mono/mono#13454 - watchOS apps crash on launch if built with LLVM
  * gh#mono/mono#13455 - AOT crashes with “MVAR 0 (Ts) cannot be expanded with type 0x1e” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13460 - AOT crashes with “Instruction does not dominate all uses” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13463 - [WASM] Mixed Mode: function signature mismatch
  * gh#mono/mono#13466 - Crash at runtime likely related to protected accessibility of a method declared in an interface.
  * gh#mono/mono#13467 - Unexpected System.MethodAccessException is thrown for a protected method declared in an interface
  * gh#mono/mono#13478 - Undefined symbol ___sync_lock_test_and_set_4 on armv7 in xamarin-macios 2019-02
  * gh#mono/mono#13479 - System.Runtime.CompilerServices.UnsafeTests attempting to JIT compile on iOS devices
  * gh#mono/mono#13508 - ILAsm: adds ‘virtual’ attribute to sealed default interface methods
  * gh#mono/mono#13522 - AOT issue on WatchOS: “* Assertion at mini-llvm.c:9381, condition `fields [2 + i]’ not met “
  * gh#mono/mono#13526 - The repl (monotouch_tv_runtime) assemblies don’t work for tvOS
  * gh#mono/mono#13597 - Runtime Error when using span on LeetCode
  * gh#mono/mono#13607 - Assertion in xamarin-macios link sdk test: “mini-generic-sharing.c:568, condition `is_ok (error)’ not met, function:inflate_info, Could not inflate generic type, due to MVAR 0 (T_ULONG) cannot be expanded with type 0x1e”
  * gh#mono/mono#13610 - Returning tuple broken when enabling fullAOT+LLVM
  * gh#mono/mono#13639 - mono-cil-strip crashes when called against the monotouch_Microsoft.CSharp_xunit-test.dll
  * gh#mono/mono#13654 - Interpreter Crash When Doing Fancy Reflection
  * gh#mono/mono#13672 - [2019-02] Xamarin.Android runtime tests crash on free
  * gh#mono/mono#13714 - Exception during static constructor loading is not cleaned up
  * gh#mono/mono#13775 - New Mono drop crashing in C# symbol tests
  * gh#mono/mono#13787 - [wasm] Uint8ClampedArray.From(byte[]) invalid cast
  * gh#mono/mono#13804 - [MacSDK] pkg-config is 32-bit only
  * gh#mono/mono#13834 - Mac crash reports do not give the right SizeOfImage
  * gh#mono/mono#13878 - System.Reflection.Emit.DynamicMethod:CreateDelegate (?) crashes XM apps when under hardened runtime
  * gh#mono/mono#13888 - (FullAOT) Ran out of trampolines of type 3
  * gh#mono/mono#13889 - [llvm] Bounds checks are not eliminated
  * gh#mono/mono#13923 - [DIM] [CoreCLR Test] boring not working
  * gh#mono/mono#13925 - [DIM] [CoreCLR Test] abstractcalls not working
  * gh#mono/mono#13941 - Crash During AOT of ASP.NET Core Assemblies
  * gh#mono/mono#13974 - mono: symbol lookup error: /usr/lib/libmono-llvm.so: undefined symbol: mono_class_get_generic_class
  * gh#mono/mono#14005 - Method mono_type_is_generic_parameter is not exposed in shared libraries
  * gh#mono/mono#14079 - Interpreter Crash on Reference Source System.Web.Extensions
  * gh#mono/mono#14143 - Techempower Platform Plaintext Hangs on Every Request using LLVM JIT
  * gh#mono/mono#14170 - “Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR)” after debugger pauses and then continues on nested exception
  * gh#mono/mono#14181 - Pango modules.cache contains jenkins builder path
  * gh#mono/mono#14195 - 5.20.1.19 configure fails if enable-cxx but no C++ compiler found
  * gh#mono/mono#14214 - HttpClient.SendAsync() with &gt; 2 GB response body.
  * gh#mono/mono#14215 - Suggestion: switch to 7z native format instead of ZIP for Mono archives
  * gh#mono/mono#14234 - SqliteMembershipProvider initialization bug (Failed to map path ‘/’).
  * gh#mono/mono#14243 - [Wasm] Assertion at mini-llvm.c:2106, condition 'clause-&gt;flags == MONO_EXCEPTION_CLAUSE_NONE || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FINALLY || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FAULT' not met
  * gh#mono/mono#14246 - Interpreter crashes when encountering build-in types
  * gh#mono/mono#14247 - Assertion on 32-bit iOS device with thumb code
  * gh#mono/mono#14255 - Copying from Mono port of Windows Forms doesn’t work in some programs on Linux
  * gh#mono/mono#14261 - LLVM Generates Wrong IndexOf Span code
  * gh#mono/mono#14290 - [ios] Non-public API usage when submitting app
  * gh#mono/mono#14543 - Decoded custom attribute values leak the encoded value receiver
  * gh#mono/mono#14551 - Result for EnumCompareTo differs from Core implementation
  * gh#mono/mono#14585 - [tests] Don’t send HTTP requests to Google
  * gh#mono/mono#14669 - mempool allocate bug?
  * gh#mono/mono#14729 - interpreter tests fail on iOS and tvOS for mscorlib tests
  * gh#mono/mono#14792 - [sdks][ios] Perform the appropriate cast of objc_msgSend and friends
  * gh#mono/mono#14793 - Mono-Native not working on MacOS Catalina
  * gh#mono/mono#14809 - Cannot box IsByRefLike type 'System.ReadOnlySpan'1' in Forms designer tests with 6.0
  * gh#mono/mono#14839 - [xamarin] TimeZoneInfo.Local always returns “Local” name
  * gh#mono/mono#14841 - opt: Unknown command line argument ‘-place-safepoints’ in XI 2019-06 integration
  * gh#mono/mono#14871 - [wasm] System.Text.Json struct serialization fails (but works on CoreCLR)
  * gh#mono/mono#14872 - System.Runtime.CompilerServices.UnsafeTests.ReadWriteDoublePointer test failure on devices in Xamarin.iOS
  * gh#mono/mono#14972 - Xamarin.iOS: System.ExecutionEngineException: Attempting to JIT compile method ‘(wrapper delegate-begin-invoke) System.IAsyncResult System.Func`2&lt;ExecutionEngineExceptionTest.AppDelegate, bool&gt;:begin_invoke_IAsyncResult__this___T_AsyncCallback_object (ExecutionEngineExceptionTest.AppDelegate,System.AsyncCallback,object)’
  * gh#mono/mono#14975 - Mono profiler crashes when running IDE leak tests for VSMac
  * gh#mono/mono#15048 - [aot] Duplicate .fnstart Directive Compiler Error
  * gh#mono/mono#15058 - [2019-06][iOS] Several tests on iOS fail on a 32b device
  * gh#mono/mono#15261 - [iOS][Tests] There are a number of System.Numeric tests that fail on iOS 32b devices
  * gh#mono/mono#15262 - [iOS][Tests] A number of linq tests fail on iOS 32b devices
  * gh#mono/mono#15263 - [iOS][Tests] A number of tests from Microsoft.CSharp fail on iOS 32b devices.
  * gh#mono/mono#15265 - [watchOS][Tests] The System_xunit-test.dll for watchOS includes tests that should be ignored
  * gh#mono/mono#15307 - [iOS][Tests] Several corelib tests crash on iOS32b devices.
  * gh#mono/mono#15328 - [MacOS][Tests] Several tests fail due to a System.IO exception
  * gh#mono/mono#15329 - [MacOS Modern][Tests] System.IO.AnonymousPipe tests are included when they are not supported.
  * gh#mono/mono#15330 - Runtime deadlock
  * gh#mono/mono#15366 - StringBuilder marshalling bug
  * gh#mono/mono#15441 - “pos undeclared” compilation error
  * gh#mono/mono#15692 - Catching IndexOutOfRange doesn’t provide message
  * gh#mono/mono#15751 - Memory leak in mono 6.0.0.313 for delegates with target that are passed to native code
  * gh#mono/mono#15825 - DeflateStream leaks native memory if not explicitly disposed
  * gh#mono/mono#15878 - Crash in mono_coop_mutex_lock while running VS for Mac
  * gh#mono/mono#15887 - [regression] File.GetLastWriteTime fails with specific (GMT+8) timezone
  * gh#mono/mono#15999 - [mini] run regression tests with fullaot+llvm
  * gh#mono/mono#16010 - typeof(object).GetMember(“”) does not return an empty array
  * gh#mono/mono#16024 - Native crash in ves_icall_System_Net_Sockets_Socket_Connect_internal
  * gh#mono/mono#16032 - IOException: Sharing violation on path …
  * gh#mono/mono#16122 - VS 16.2.0 regression: CopyToAsync from DeflateStream to GzipStream throws NotImplementedException
  * gh#mono/mono#16486 - FileSystemEventArgs.FullPath throws ArgumentNullException
  * gh#mono/mono#16712 - SIGSEGV in mono_class_setup_vtable_general</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1575374400">- removed a few internal dependencies because rpms internal dependency
  search accidently added those to the package</changelog>
  <changelog author="azouhr@opensuse.org" date="1579262400">- enable btls for s390x
- remove stale symlinks to prevent from brp-25-symlink errors</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1580817600">- Update to the most current mono release, 6.8.0.96.
  for changes, please refer to the commits log on github: https://github.com/mono/mono/commits/master</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1584619200">- Add aprofutil.exe.mdb and remove aprofutil.pdb, mdoc.exe and
  monolinker.* from file list for aarch64 and ppc64/ppc64le</changelog>
  <changelog author="dmulder@suse.com" date="1587470400">- Update to the most current mono release, 6.8.0.105.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Add mono.attr and install it to %_rpmconfigdir/fileattrs: enable
  the dependency scanner for rpm packages (boo#1152775).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1590321600">- Enable roslyn on aarch64 to build additionnal tools (mdoc.exe, ...)</changelog>
  <changelog author="mgorse@suse.com" date="1590494400">- Add fix-s390x-ucontext.patch: fix the build on 15.2/s390x
  (bsc#1171934).
- Add _constraints to prevent running out of disk space.</changelog>
  <changelog author="idonmez@suse.com" date="1590580800">- Add mono-find-provides and mono-find-requires from Fedora and use
  it instead. Fixes boo#1152775</changelog>
  <changelog author="idonmez@suse.com" date="1590667200">- Fixup mono-find-requires for v1 profiles</changelog>
</package>
<package pkgid="7d220a168de43b8acb5dd57d5890c4435c78e1f328235efd94ac5f512b7e5442" name="ibm-data-db2" arch="ppc64le">
  <version epoch="0" ver="6.8.0" rel="150200.5.2.5"/>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411200">- Update to version 5.10.0.140 (5.10.0 Stable)
- Remove patch: provides-facades.patch
- Add profiler-aot-parse_args-fix.patch:
  * Fix OBS build failure with "free(): invalid pointer" libc error.
- New features and changes:
  * Interpreter: the interpreter is now compiled in by default into Mono, and you can use it by running mono --interpreter
  * Default Interface Methods: the runtime now supports Default Interface Methods, we now only miss the C# compiler support
  * Mono SDKs: this is a new way of building Mono for some of the platforms that we support: Android, iOS and WebAssembly.
  * WebAssembly port: this is the first release where the interpreter can reliably run most of the class libraries test suite.
  * Dedicated Coverage profiler: the coverage profiler has been extracted from the log profiler, making it much more lightweight
  * ARM Memory Barriers: explicitly encode memory barrier type on ARM64, instead of relying on undefined behaviour according to the ARMv8 ABI
  * AOT Size Reduction via Code Deduplication: we now support deduplicating generics code across assemblies
  * Class Libraries: the recently announced .NET 4.7.1 is now supported and available as a specific target via MSBuild configuration; the System.Data assembly was fully replaced with CoreFX implementation resolving many limitations and corner cases issue we had as well as implementing missing features and APIs; significant parts of System.Security assembly implementation were replaced with CoreFX implementation
  * Roslyn compiler: roslyn compiler has been updated to version 2.6.0 which includes all C# 7.2 features
  * The Mono C# compiler: MCS gained support for some more C# 7.x features
- Bugfixes:
  * bxc#19503 - Process.Start on OS X fails silently for missing file
  * bxc#20562 - Seeming valid IL produces invalid result
  * bxc#40699 - Console.ReadXXX does not echo input after TermInfoDriver is initialized
  * bxc#45893 - I18N: EncoderFallbackBuffer.Fallback gets next character instead of the current one
  * bxc#50189 - SGEN XMM scanning: Linux/Intel (32 + 64)
  * bxc#50190 - SGEN FPU scanning: Darwin/ARM64
  * bxc#52675 - HttpListener doesn’t work with SSL
  * bxc#53296 - Latin1Encoding throws exception on Mono when it doesn’t on MS.NET
  * bxc#56003 - URI returns wrong absolute path on OSX when File name is UTF-8
  * bxc#56194 - SIGSEGV on System.Runtime.CompilerServices.RuntimeHelpers.InitializeArray()
  * bxc#56727 - Runtime crashes when disposing DeflateStream
  * bxc#57892 - Static lib in the msi distrib doesn’t resolve all symbols
  * bxc#57893 - mkbundle is not working on Windows
  * bxc#57938 - Differences in behavior Type.Fullname in Mono and .NET Framework when Type is a generic type that is not a generic type definition but contains unresolved type parameters
  * bxc#58400 - System.Uri broken with files
  * bxc#58411 - System.Security.Cryptography.CryptographicException: Store root doesn’t exist
  * bxc#59080 - Type information of underlying type for enums compiled by Mono.CSharp.dll seems to be incorrect
  * bxc#59182 - Crash/SIGSEGV with interop callback with struct parameter from native to managed on Xamarin.Android on armv7
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59393 - NullReferenceException when MonthCalendar clicked out of min/max date
  * bxc#59608 - Attribute MethodImplOptions.AggressiveInlining causes method to always return NULL
  * bxc#59664 - Type.GetType(“”, true) throws ArgumentException on Mono but TypeLoadException on .NET
  * bxc#59832 - [iOS]MT3001 error: Could not AOT the assembly error while building iOS/mobile samples
  * bxc#59881 - DllImport calls a wrong function if its function number greater than 65535
  * bxc#59909 - WebInvokeAttributeTest.RejectTwoParametersWhenNotWrapped() fails on Android
  * bxc#59916 - get_current_locale_name fails under the load with String conversion error: Illegal byte sequence encounted in the input
  * bxc#59956 - [llvm][bitcode] [FAIL] UniqueIdTest.Ctor_Id (System.Runtime.Serialization tests)
  * bxc#60028 - Timer doesn’t throw ODE after Dispose()
  * bxc#60029 - AsyncLocal inconsistency with .NET
  * bxc#60175 - AOT mis-compiles when coverage is used
  * bxc#60224 - Coverage profiler uses type names which don’t exist
  * bxc#60233 - Assertion in dynamic-image.c after 792b5367cd3a6ffa1a192c4d2d7ace3509cbb646
  * bxc#60238 - Mono assertion hit when using csharp repl
  * bxc#60255 - Wrong exception in emulated opcodes
  * bxc#60267 - Inconsistent symlink traversal results
  * bxc#60288 - Large Array Initializer Causes TypeLoadException
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60317 - Stuck WebRequest
  * bxc#60422 - Native crash due to unhandled errno values when accessing files on networked filesystems
  * bxc#60435 - The DataGridViewRow.CreateCellsInstance method is never invoked
  * bxc#60539 - mini-codegen.c:1265, condition `reginfo [sreg].born_in &gt; 0’ not met
  * bxc#60545 - Multiple argument generic with contravariant interface as an argument causes MissingMethodException
  * bxc#60621 - XmlDocument.Load() throws WebException when DTD url is not reachable
  * bxc#60634 - Assertion failure ‘align &gt; 0’ happening as of d15-5
  * bxc#60680 - C# 7 ref returns fail to compile
  * bxc#60771 - Attempting to JIT compile method ‘System.Runtime.CompilerServices.Unsafe:Add (byte&amp;,int)’ while running in aot-only mode
  * bxc#60865 - * Assertion at mini-codegen.c:2264, condition `sp &gt; 0’ not met
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6414 - sbyte comparison broken by optimization
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6721 - Negate operation on uint.MaxValue gives wrong result on arm64
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108.
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6848 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411201">- Add xbuild-use-roslyn-vbc.patch:
  * Make xbuild to use roslyn-vbc on roslyn-enabled builds instead of deprecated vbnc (it is also broken on roslyn-enabled builds)</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1524052800">- Update to version 5.10.1.47 (5.10.1 Stable)
- Patch updated: ucontext.patch</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534075200">- Release 5.12.0.226 (skipped):
- New features and changes:
  * Interpreter: a lot of work has been put in stabilising and passing test suite. Interpreter is able to build the full Base Class Library with Mono C# compiler (mcs)
  * IBM AIX, IBM i, Haiku ports
  * WebAssembly: several issues were fixed around GC and Base Class Libraries
  * Jemalloc: added option to support jemalloc as the malloc(3) library, need --with-jemalloc build options
  * Profiler: improved GC roots reporting
  * PAL: added support for nanosecond resolution in file information on platforms where the information is available
  * Diagnostic enhancements: the diagnostic support to inspect generated native code via MONO_VERBOSE_METHOD environement variable was extended to support multiple entries
  * Class Libraries: HttpWebRequest async handling has been rewritten
  * Class Libraries: a few internal types were decorated with StackTraceHiddenAttribute
  * Class Libraries: System.Security.Cryptography.Xml namespace in the System.Security assembly has been replaced with the CoreFX implementation
  * Class Libraries: ICSharpCode.SharpZipLib assembly was marked as obsolete and will be removed in a future release
  * illinkanalyzer tool: a new tool called the Linker Analyzer was introduced, available via the illinkanalyzer command
  * VB.NET compiler: Roslyn based VB.NET compiler (vbc) now shipped with package. Old vbnc compiled will be deprecated.
- Bugfixes:
  * bxc#41294 - Some Mono threadpool performance counters return 0
  * bxc#45901 - Missing .NET code pages ibm775 &amp; ibm737
  * bxc#56071 - Mono.Security.AuthenticodeBase Doesn’t Support PE32+ image format
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60225 - Coverage output is missing some types and methods
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60359 - AssemblyName.set_CultureName is not implemented
  * bxc#60568 - WaitHandle.WaitOne(int) doesn’t trigger SynchronizationContext.Wait
  * bxc#60756 - A crash with CEE_RET: value type stack: 0 vs. 8
  * bxc#60848 - Incorrect unicode custom attribute decoding
  * bxc#60862 - Stack overflow throws null (null is caught)
  * bxc#60900 - Error using implicit operator with Nullable
  * bxc#60986 - Memory leak when marshalling Delegate to native code
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6264 - Creating a new instance of X.509 certificate out of another, empty instance of X.509 certificate must not throw
  * gh#mono/mono#6283 - Mono is not able to notice a file change in a FileInfo object
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6343 - mono/utils/jemalloc does not exist
  * gh#mono/mono#6349 - messages during make dist: “file name is too long”
  * gh#mono/mono#6379 - Reenable System.Runtime.CompilerServices.Unsafe-xunit test on 32bit
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6411 - System.Numerics structs are incorrect sizes
  * gh#mono/mono#6464 - Socket.Send misses data on Windows
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#xamarin/maccore#628 - mscorlib/Mac/Full: LocalId (MonoTests.System.TimeZoneInfoTest+PropertiesTests.LocalId) fails
  * gh#xamarin/maccore#629 - iOS 32-bit sim: TimeZoneTest.TestCtors (D02) fails</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534161600">- Update to version 5.14.0.177 (5.14.0 Stable)
- Remove patch: profiler-aot-parse_args-fix.patch
- Patch fix-dbg-headers.patch was updated
- Added patch: fix-ppc-64bit-portability-issue.patch:
  * Fix 64bit-portability-issue OBS error when compiling for PPC arch
- New features and changes:
  * Better generic sharing: generic sharing has been improved
  * Memory optimization for handles: reduce the amount of preallocated memory when process requires only a minimal number of handles
  * GC Handling of very large objects: fix handling of objects which are over 4GBs of memory
  * Class Libraries: significant improvements to System.Windows.Forms
  * MCS: C# 7.x support was extended
  * NuGet: the bundled version of NuGet has been updated to 4.7.0
  * mkbundle: a new --mono-api-struct-path option was introduced to allow customization of runtime functions used for the embedding
- Bugfixes:
  * gh#mono/mono#6178 - Log profiler should provide startup time in stream header from same source as event timestamps
  * gh#mono/mono#6186 - Code coverage instrumentation logic should deal with inlining the same way as enter/leave instrumentation
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6211 - Rare shutdown crash in profiler stress tests
  * gh#mono/mono#6266 - ArrayTypeMismatchException when using array of generic ICollection or IList
  * gh#mono/mono#6357 - Keepass crashes when editing an entry notes field in a specific way
  * gh#mono/mono#6579 - Type.GetInterface fails to find implemented interface when ignoreCase: true is used
  * gh#mono/mono#6666 - Invalid cast is not checked for nullable types
  * gh#mono/mono#6752 - System.TermInfoReader cannot handle new NCurses 6 TermInfo files
  * gh#mono/mono#6767 - Add missing APIs to System.Data
  * gh#mono/mono#6788 - nuget restore fails to parse valid json from nuget.org with mono/master
  * gh#mono/mono#6801 - Self-hosted HttpListener gets empty file collection and input stream for multipart PUT or POST requests
  * gh#mono/mono#6812 - MonoProfilerCoverageData::column is equal 0
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#6999 - test_0_time_drift - mono/tests failure
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7093 - Regression in Array interface conversions
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7134 - NullReferenceException while processing concurrent requests with a WCF app
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7145 - [XI] RuntimeFeatureTest.NoNewFeaturesAdded failure in mscorlib tests
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path.
  * gh#mono/mono#7199 - finalizer-abort.exe
  * gh#mono/mono#7200 - Problem building on Arch linux
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7328 - suggest recursive self-calls do not create trampoline
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7378 - WeakAttribute causes all fields within a class to become weak
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7408 - No longer builds with CentOS 6 (GCC 4.4.7)
  * gh#mono/mono#7432 - gcsuppressfinalize.exe CoreCLR test started failing after upgrade to Debian 9
  * gh#mono/mono#7449 - PInvoke to function that takes a struct with an array of double gets incorrect results on Android
  * gh#mono/mono#7460 - w32handles require much memory when the minimum required is much lower
  * gh#mono/mono#7535 - [llvm/bitcode] Crash in mono_class_has_failure (class.c:10037)
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7537 - new object [int.MaxValue] crashes runtime instead of OOM
  * gh#mono/mono#7565 - Generic symbol names exported from libmono
  * gh#mono/mono#7568 - Intermittent failures on bug-80307.exe and other tests using FileSystemWatcher
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7613 - mprof-report can’t read v13 file that Mono.Profiler.Log can
  * gh#mono/mono#7620 - DrawToBitmap in Control.cs does not work
  * gh#mono/mono#7624 - Strict loader still loads incorrect assembly
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7657 - Method is inaccessible from method in nested classes with inheritance.
  * gh#mono/mono#7661 - Suppress the degraded allocation warning for the WebAssembly target
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7696 - LINQ bug (ConcatNIterator.ToArray()?)
  * gh#mono/mono#7729 - [mcs] fails to compile code with Tuple
  * gh#mono/mono#7786 - “mono/metadata/threads.c:3016, condition `internal’ not met” under certain conditions with the soft debugger attached
  * gh#mono/mono#7792 - Failure to AOT compile due to condition `load_opcode != OP_LOADV_MEMBASE’ not met
  * gh#mono/mono#7805 - F# build is broken due to new String.StartsWith overload
  * gh#mono/mono#7822 - Failing to serialize ConcurrentDictionary with BinaryFormatter
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7860 - illinkanalyzer isn’t whitelisted in the macOS package
  * gh#mono/mono#7864 - [wasm] Don’t fail when TaskCreationOptions.LongRunning is used
  * gh#mono/mono#7903 - Mono VS solution has wrong all projects in all profiles used
  * gh#mono/mono#7920 - build broken with –enable-minimal=soft_debug
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * bxc#10087 - Process exit can be blocked if the AppDomain.ProcessExit event hangs
  * bxc#11771 - IsolatedStorageFile.GetFileNames() throws exception w/ nested dirs
  * bxc#12850 - FtpWebRequest does not handle remote paths properly
  * bxc#18941 - Calling Marshal.SizeOf() with an Empty struct using Sequential or Explicit returns 0
  * bxc#19038 - Quitting XS caused MainStoryboard.Storyboard to convert to IB file
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#25224 - stack overflow after printfn something
  * bxc#25444 - WCF method with UriTemplate annotation fails with InvalidOperationException
  * bxc#33208 - System.Reflection.Module.ResolveMember() returning inconsistent results when querying dynamic assemblies
  * bxc#46473 - Error: The object with ID N implements the IObjectReference interface for which all dependencies cannot be resolved. The likely cause is two instances of IObjectReference that have a mutual dependency on each other
  * bxc#53272 - Unhandled Exception System.Collections.Generic.KeyNotFoundException in ikdasm
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59400 - Wrong interface method is called (two interfaces, covariance)
  * bxc#59779 - HttpClient, when using GZIP, hangs while sending multiple requests in parallel.
  * bxc#60065 - Make exception marshaling work with system mono
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60843 - Type 0x15 not handled in custom attr value decoding</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1541678400">- Update to version 5.16.0.179 (5.16.0 Stable)
- Remove patch: fix-64bit-portability-issue.patch
- New features and changes:
  * LLVM: a new option llvmopts has been added to allow override the built-in set of flags passed to the LLVM optimizer
  * Response files support: a response file is a plain-text file that contains strings to be treated as arguments for mono runtime, activated with "--response=FILE" option
  * Assembly loader: the loading of mixed strong named and non-strong names assemblies has been improved to further match .NET desktop behaviour
  * Hybrid suspend: hybrid suspend is a new mechanism that Mono’s garbage collector may use to pause threads when during garbage collection
  * 32-bit floating operations: performing 32-bit floating operations using 32-bit math is now the default settings for the runtime
  * The debugger library: the runtime can be configured using --enable-minimal=soft_debug option and the debugger code will be compiled into a separate libmono-dbg.a library. The library needs to be linked into the app if needed
  * Custom modifiers enhancements: fixed a few issues in handling custom modifiers, especially around type equality with custom modifiers
  * Optimizations: various optimizations for Span&lt;T&gt;, ReadOnlySpan&lt;T&gt;, EqualityComparer&lt;T&gt;.Equals, Enum.HasFlags
  * CoreFX convergence: fully replaced System.Xml.Linq, System.Json, System.Threading.Tasks.Dataflow, System.ServiceModel.Syndication assemblies and System.Net.Mail, System.ComponentModel, System.Text.Encoding namespaces
  * Client certificate support: added support for client certificates for authentication as well as making requests to web servers that use TLS renegotiation
  * System.MathF type: the single-precision math operations are now available in a new System.MathF class
  * Prettier exception stack-traces: prettier exception printer, especially for generated code stack traces, improvements for async exceptions
  * Mono.Options: the arbitrary command nesting is now supported
  * C# compiler: the Roslyn compiler (csc) has been updated to version 2.8.2 which includes C# 7.3 support
  * sn: the sn tool, the utility for signing assemblies, has been updated to support signing PE32+ assemblies
  * mkbundle: mkbundle has been extended to allow further customization of Mono runtime initialization sequence
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#6173 - Periodic heapshot mode calculates time difference incorrectly
  * gh#mono/mono#6466 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing on newer Ubuntu
  * gh#mono/mono#6647 - Jagged arrays cannot be cast to IList&lt;&gt;
  * gh#mono/mono#6834 - Frequent timing out of the ‘monitor-abort’ tests on CI
  * gh#mono/mono#6936 - Mono runtime doesn’t check modreqs for overriding methods
  * gh#mono/mono#7058 - [interp] pinvoke.exe is flaky
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7247 - CoreFX System.Text namespace
  * gh#mono/mono#7260 - StackTrace.GetFrames() does not return frames from captured traces
  * gh#mono/mono#7305 - Stack overflow when hosting a WCF service when contract interface inherits other interfaces
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7402 - [interp] fix System.Threading.ThreadTest.Test_Interrupt
  * gh#mono/mono#7525 - Profiler exception clause reporting is broken
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7649 - Exception stacktrace is null when task delegate is created from local function
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7683 - Assertion at /Users/builder/data/lanes/5808/1c6f300e/source/xamarin-macios/external/mono/mono/profiler/log.c:546, condition `mono_lls_insert (&amp;log_profiler.profiler_thread_list, hp, &amp;thread-&gt;node) &amp;&amp; “Why can’t we insert the thread in the LLS?”’ not met
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7716 - mono’s mscorlib.xml descriptor file seems incomplete for Xamarin.Mac
  * gh#mono/mono#7731 - MKBundle fails on Windows due to a folder check/missing folder
  * gh#mono/mono#7785 - Dead link (404) in a runtime execution engine exception
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7944 - CreateDelegate produces delegate wrapping incorrect method
  * gh#mono/mono#7947 - Missing forwarders from System.Runtime.Extensions
  * gh#mono/mono#8036 - Update API diff to ignore more attributes
  * gh#mono/mono#8074 - signing problems in preset fullaot build
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8112 - Wrong maximal instruction length of instruction tailcall_membase on ARM64
  * gh#mono/mono#8122 - CoreFX System.Xml.Linq
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8149 - Assembly.LoadFile and Assembly.LoadFrom have same behavior
  * gh#mono/mono#8175 - Changing eglib doesn’t rebuild mono
  * gh#mono/mono#8177 - [wasm] master broken due to WASM-ERR: missing function: mono_debugger_agent_init
  * gh#mono/mono#8218 - SN fails when signing x64 assemblies
  * gh#mono/mono#8250 - assertion failure fullaot llvm System.Drawing.dll
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8282 - [android] respect maximum length of a message when using __android_log_write ()
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8321 - Build break/test failures on FullAOT+LLVM configuration
  * gh#mono/mono#8329 - mono –interpreter got * Assertion at ..\mono\mini\interp\interp.c:3557, condition `csig-&gt;call_convention == MONO_CALL_DEFAULT’ not met
  * gh#mono/mono#8340 - Issue with black text on console, possibly ncurses
  * gh#mono/mono#8356 - Hybrid suspend: backtrace in GC Unsafe mode considered harmful (on Linux)
  * gh#mono/mono#8372 - unload-appdomain-on-shutdown.exe flaky test
  * gh#mono/mono#8407 - TypeDescriptorTest.TestCreateDesigner and TestGetAttributes broken on FullAOT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8422 - Ambiguous call Encoding.GetByteCount(char[], int, int) and Encoding.GetByteCount(string, int, int)
  * gh#mono/mono#8430 - Fails to compile without AOT (enable-minimal=profiler,debug,aot)
  * gh#mono/mono#8447 - ilasm can’t assemble vbbyrefstr parameters
  * gh#mono/mono#8469 - API/Project Files diff renderer stops at XML end comment –&gt;
  * gh#mono/mono#8473 - ThreadPoolTests.PerformanceCounter_WorkItems fails occasionally
  * gh#mono/mono#8488 - Doesn’t compile with Clang on ARM64
  * gh#mono/mono#8572 - Build fails on Redhat 6.8 with GCC 4.4.7
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8587 - configure.ac G_HAVE_ISO_VARARGS problems
  * gh#mono/mono#8597 - System.Reflection.Emit: ParameterBuilder.SetConstant(value) throws ArgumentException for nullable value typed parameters
  * gh#mono/mono#8623 - Complete the System.Memory types import
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * gh#mono/mono#8701 - AOT failure if ref readonly with generics is used
  * gh#mono/mono#8712 - FileSystemWatcher only works for one instance
  * gh#mono/mono#8721 - System.Threading.Tasks.TaskFactoryTests.FromAsync_BeginCallback failing under XM with 2018-04
  * gh#mono/mono#8726 - Loading denied assemblies via Assembly.LoadFrom can cause issues, eg. for VSMac
  * gh#mono/mono#8759 - Build of Master fails with GCC 4.4.7
  * gh#mono/mono#8787 - ThreadPrincipalTests.PrincipalFlowsToAsyncTask failure on device
  * gh#mono/mono#8820 - [loader] Mono is too strict when checking for already loaded assemblies.
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#8866 - jit profiler option crashes iOS apps
  * gh#mono/mono#8897 - “Microsoft.Managed.Core.targets” is missing from roslyn-binaries
  * gh#mono/mono#8915 - Using BinaryFormatter to deserialize an array in a struct in a parent class fails with unfriendly exception [reproducible test case i promise]
  * gh#mono/mono#8979 - configure script incorrectly assumes functions are available with some conditions
  * gh#mono/mono#9002 - ServiceControllerTest.cs is designed to fail.
  * gh#mono/mono#9023 - Two ValueType properties initialization inline fails in mono-wasm
  * gh#mono/mono#9031 - HttpWebRequest.EndGetRequestStream throws wrong exception on abort
  * gh#mono/mono#9033 - DynamicMethod creation fails with “method arguments are incompatible”
  * gh#mono/mono#9179 - CI build breakage for 2018-04, msbuild
  * gh#mono/mono#9234 - [System]: Renegotiation in AppleTls requires OS X 10.12+
  * gh#mono/mono#9277 - Cannot get the exit code from a non-child process on Unix (on Windows)
  * gh#mono/mono#9318 - watchOS: “fastcc” not supported with Xcode 10’s clang
  * gh#mono/mono#9753 - [loader] LoadFile from application base should load in default context
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9869 - iOS: mini test failure in release/llvm mode (JitTests.Math: Expected: 0 But was: 1)
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9996 - The type initializer for ‘System.Data.Entity.Core.Objects.ELinq.ExpressionConverter’ threw an exception. (regression in Mono 5.14)
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#23668 - System.Net.Http.Formatting should not contain Newtonsoft.Json
  * bxc#26983 - Console properties might deadlock for background properties
  * bxc#46917 - Incorrect validation checks in message formater
  * bxc#60065 - Make exception marshaling work with system mono</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1550145600">- Update to version 5.18.0.240, release skipped
- New features and changes:
  * AOT: Few hard to track race conditions in trampolines unboxing for AOT backend targetting amd64 were fixed
  * Interpreter: Added low-level optimizations, support Xamarin native types (nint/nuint)
  * Custom Marshalers: The logic handling custom marshalers, types implementing IICustomMarshaler has been mostly rewritten
  * Optimizations: The intrinsics built on top of SSE41 for Math.Round/Math.Floor/Math.Ceiling were added
  * Windows: Mono Windows cross-compiler is using the same LLVM release branch as Linux resolving issues in scenarios where llvm-config.exe can’t be run (none WSL/CygWin build target)
  * CoreFX convergence: more CoreFX code was imported in particular in System.Reflection namespace, Many common types in mscorlib System namespace are now fully CoreFX based including System.Math
  * Mono.Options: A new CommandSet.GetCompletions() method was introduced
  * System.Runtime.InteropServices: It’s now possible to use RuntimeInformation API to detect ARM and ARM64 platforms
  * MSBuild: Reference assemblies for .NET 4.7.2 are included to allow targeting .NET Framework 4.7.2 using MSBuild on Mono
- Bugfixes:
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1555070400">- Update to version 5.20.1 Stable (5.20.1.19)
- Patch fix-dbg-headers.patch was updated
- Patch ucontext.patch was removed
- Added libtest.patch from upstream: fix build failure
- New features and changes:
  * System.Data: the support for SSPI (Security Support Provider Interface) in System.Data assembly has been added. Additional package (krb5) needs to be installed in order to use this feature.
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10735 - mono64[80780:1186894] error: * Assertion: should not be reached at debugger-agent.c:6619
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10834 - Error loading generic override of in parameter
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11317 - Unexpected behaviour of DateTime.ToString with Korean language on iOS/Android
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * gh#mono/mono#11956 - os-event-unix.c:82 assert(event) failure
  * gh#mono/mono#11965 - [iOS/32bit/device] mscorlib test failures: DoubleFormatterTest.TestFormatStringsN# and DoubleTest.LongLongValueRoundtrip
  * gh#mono/mono#12069 - MethodInfo.ReturnParameter.IsDefined(type) throws IndexOutOfRangeException
  * gh#mono/mono#12130 - [watchOS] MT3001: Could not AOT the assembly mscorlib.dll
  * gh#mono/mono#12235 - Crash while profiling roslyn compiler server
  * gh#mono/mono#12344 - FastCopy may silently fail to do anything
  * gh#mono/mono#12362 - Problem with DefaultValueAttribute and Color values
  * gh#mono/mono#12421 - Task calls SynchronizationContext.Post on cancelling
  * gh#mono/mono#12461 - ReflectionModelServices.IsExportFactoryImportDefinition should not throw
  * gh#mono/mono#12724 - xtro-sharpie.exe crashes with “Cannot transition thread 0x10c3ef5c0 from STATE_BLOCKING with DO_BLOCKING”
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8225 - Mono mkbundle output executable throws: “Error mapping file: No error”
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9418 - SslStream.AuthenticateAsClient throws wrong exception types
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9951 - cross build regressed wrt System.Native and “shm_open that works well enough with mmap”
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133266).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1574251200">- update to new version 6.4.0
- removed libtest.patch because it was fixed upstream
- New features and changes:
  * Highlights
    C# compiler support for C# 8 language version
    .NET Standard 2.1 support
    Updated libgdiplus to 6.0.2
    Notarized macOS installer package
  * Hardened Runtime and Notarization support on macOS
    The Mono binary installed by the .pkg for macOS is now using the Hardened Runtime capabilities and the package was notarized to comply with Apple’s new restrictions: https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution.
    This allows the package to work on the upcoming macOS 10.15 Catalina without showing warning dialogs.
  * Interpreter improvements
    The Mono interpreter was updated to support the Windows operating system.
    We also completed a lot of groundwork for upcoming future optimizations in the interpreter, like constant folding.
  * Bitness independent AOT cross compiler
    The Ahead-Of-Time (AOT) cross compiler was updated to no longer require being executed with the same bitness that it should generate code for. This means a 64bit Mono can now emit AOT code for 32bit targets.
    This work was mainly done to support executing the AOT cross compiler on macOS 10.15 Catalina (which is 64bit only) as we still need to generate code for 32bit targets like older iPhone and Apple Watch devices.
  * WebAssembly
    We continue to work on making our WebAssembly support better. Various sets of issues with the debugger have been resolved in this release and general performance and feature work is happening as well.
  * LLVM improvements
    We now leave it up to the LLVM framework to insert safepoints. Later optimizations can understand safepoints then which leads to better generated code. See https://github.com/mono/mono/pull/11789
    The LLVM backend is also supported on the Windows operating system now.
  * PPC JIT optimizations
    The PowerPC JIT received a bunch of optimization from community contributor Calvin Buckley (@NattyNarwhal).
  * Experimental build support for Fuchsia
    A very minimal and experimental support for building Mono targeting the Fuchsia OS landed in the build system.
  * .NET Standard 2.1 support
    We updated our class libraries to support the latest additions to .NET Standard. You can now run a library compiled against the .NET Standard 2.1 specification on Mono.
  * CoreFX integration
    We continued to replace some of our classes with the implementation from CoreFX to improve performance and compatibility with .NET.
  * libgdiplus update to 6.0.2
    The libgdiplus native library is used for implementing System.Drawing on Unix platforms. This release contains many important improvements from our community members.
  * System.Windows.Forms
    More fixes and layout improvements for different controls made by external contributors have landed in this release .
  * C# 8 language version support in csc and msbuild
    The C# compiler and msbuild tooling were updated to versions that support the final C# 8 language specification.
    The Default Interface Methods (DIM) feature also received a few runtime enhancements.
  * NuGet
    Bundled NuGet version has been upgraded to 5.2 RTM.
- Resolved Issues
  * gh#mono/mono#7377 - [Mono.Debugger.Soft] Connections are not properly closed
  * gh#mono/mono#7452 - Download link for macOS is osbsolete (5.8 instead of 5.10)
  * gh#mono/mono#7845 - Don’t install monograph
  * gh#mono/mono#8360 - [System.Net.Sockets] flakey failures of SocketTest.TestSelect1 on Darwin systems
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8747 - FileSystemWatcher calls event after it is Disposed
  * gh#mono/mono#9267 - Release tarballs should be compressed with xz
  * gh#mono/mono#9621 - 64 bit cross compilers targeting 32 bit platforms
  * gh#mono/mono#9664 - DateTime.Now or Timezone information do not transition out of DST for all time zones
  * gh#mono/mono#10101 - ref local of jagged array leads to InvalidProgramException
  * gh#mono/mono#10277 - [Reflection] Event accessors don’t inherit ReflectedType
  * gh#mono/mono#10645 - WebException is thrown when reading from WebException.Response.GetResponse() stream
  * gh#mono/mono#11431 - Add Brotli compression to existing System.IO.Compression assembly
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11643 - mkbudle problem - Illegal byte sequence
  * gh#mono/mono#12157 - new DriveInfo(Path.GetTempPath()) crashes on macOS
  * gh#mono/mono#12182 - LLVM AOT caches require SSE4.1-capable CPU
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12839 - [Windows] block_guard_restore_aligment_on_exit.exe frequently times out on CI
  * gh#mono/mono#12843 - Mono Android debugger crashes using HttpClient wrapped in Async Method
  * gh#mono/mono#12871 - wasm var co = new System.Net.CookieContainer(); error System.DllNotFoundException: libc
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#12945 - corlib-xunit tests taking 10x longer in the coop configuration
  * gh#mono/mono#12964 - [debugger][wasm] Assertion at mono/metadata/loader.c:2500, condition ‘' not met
  * gh#mono/mono#12981 - [WASM] Transform.c:2856, condition `' not met
  * gh#mono/mono#12988 - [WASM] LLVM failed for ‘ObservableCollectionExtensions.InternalUpdate’: incoming phi sreg1
  * gh#mono/mono#12998 - [WASM] llvmonly-runtime.c:804, condition `' not met
  * gh#mono/mono#13028 - FSharpType.IsUnion broken inside of F# Interactive due to missing System.Reflection.Emit.AssemblyBuilder.ReflectionOnly implementation
  * gh#mono/mono#13030 - Directory.GetLogicalDrives () missing SystemNative_GetAllMountPoints pal function
  * gh#mono/mono#13056 - AV inside mono_local_cprop+0x23f
  * gh#mono/mono#13150 - [WinForms] Related Forms closing
  * gh#mono/mono#13163 - Task: Use async DNS resolution in Socket and web stack code.
  * gh#mono/mono#13195 - [wasm][ci] Intermittent failures with ChakraCore Tests
  * gh#mono/mono#13224 - iOS SDKs test app build doesn’t work when not in sdks/ios directory
  * gh#mono/mono#13231 - CGPattern causes “Attempting to JIT compile method” exception since VS 7.5
  * gh#mono/mono#13250 - Setting CustomErrorsMode for RemotingConfiguration throws NotImplementedException
  * gh#mono/mono#13261 - [sdb] StackOverflow when invoking many methods from client debugger
  * gh#mono/mono#13282 - [SWF] Method OnClosed should pass FormClosedEventArgs type, instead of EventArgs
  * gh#mono/mono#13284 - Checked ulong relational operation throws wrong OverflowException on armeabi-v7a
  * gh#mono/mono#13297 - [WASM] decompose.c:1471, condition `cfg-&gt;cbb == first_bb’ not met
  * gh#mono/mono#13311 - [sdb] Failure to suspend
  * gh#mono/mono#13319 - Crash executing static methods on interfaces
  * gh#mono/mono#13350 - MemberInfo.ReflectedType returns wrong reflected type for an event method
  * gh#mono/mono#13374 - Crash executing default implemented property in interface
  * gh#mono/mono#13412 - Bump netstandard.dll assembly version to 2.1
  * gh#mono/mono#13445 - Fork regression in Mojave due to MAP_JIT
  * gh#mono/mono#13452 - [Linux] Mono (5.18.0.268) crashes in String:IndexOf(char value, int startIndex)
  * gh#mono/mono#13454 - watchOS apps crash on launch if built with LLVM
  * gh#mono/mono#13455 - AOT crashes with “MVAR 0 (Ts) cannot be expanded with type 0x1e” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13460 - AOT crashes with “Instruction does not dominate all uses” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13463 - [WASM] Mixed Mode: function signature mismatch
  * gh#mono/mono#13466 - Crash at runtime likely related to protected accessibility of a method declared in an interface.
  * gh#mono/mono#13467 - Unexpected System.MethodAccessException is thrown for a protected method declared in an interface
  * gh#mono/mono#13478 - Undefined symbol ___sync_lock_test_and_set_4 on armv7 in xamarin-macios 2019-02
  * gh#mono/mono#13479 - System.Runtime.CompilerServices.UnsafeTests attempting to JIT compile on iOS devices
  * gh#mono/mono#13508 - ILAsm: adds ‘virtual’ attribute to sealed default interface methods
  * gh#mono/mono#13522 - AOT issue on WatchOS: “* Assertion at mini-llvm.c:9381, condition `fields [2 + i]’ not met “
  * gh#mono/mono#13526 - The repl (monotouch_tv_runtime) assemblies don’t work for tvOS
  * gh#mono/mono#13597 - Runtime Error when using span on LeetCode
  * gh#mono/mono#13607 - Assertion in xamarin-macios link sdk test: “mini-generic-sharing.c:568, condition `is_ok (error)’ not met, function:inflate_info, Could not inflate generic type, due to MVAR 0 (T_ULONG) cannot be expanded with type 0x1e”
  * gh#mono/mono#13610 - Returning tuple broken when enabling fullAOT+LLVM
  * gh#mono/mono#13639 - mono-cil-strip crashes when called against the monotouch_Microsoft.CSharp_xunit-test.dll
  * gh#mono/mono#13654 - Interpreter Crash When Doing Fancy Reflection
  * gh#mono/mono#13672 - [2019-02] Xamarin.Android runtime tests crash on free
  * gh#mono/mono#13714 - Exception during static constructor loading is not cleaned up
  * gh#mono/mono#13775 - New Mono drop crashing in C# symbol tests
  * gh#mono/mono#13787 - [wasm] Uint8ClampedArray.From(byte[]) invalid cast
  * gh#mono/mono#13804 - [MacSDK] pkg-config is 32-bit only
  * gh#mono/mono#13834 - Mac crash reports do not give the right SizeOfImage
  * gh#mono/mono#13878 - System.Reflection.Emit.DynamicMethod:CreateDelegate (?) crashes XM apps when under hardened runtime
  * gh#mono/mono#13888 - (FullAOT) Ran out of trampolines of type 3
  * gh#mono/mono#13889 - [llvm] Bounds checks are not eliminated
  * gh#mono/mono#13923 - [DIM] [CoreCLR Test] boring not working
  * gh#mono/mono#13925 - [DIM] [CoreCLR Test] abstractcalls not working
  * gh#mono/mono#13941 - Crash During AOT of ASP.NET Core Assemblies
  * gh#mono/mono#13974 - mono: symbol lookup error: /usr/lib/libmono-llvm.so: undefined symbol: mono_class_get_generic_class
  * gh#mono/mono#14005 - Method mono_type_is_generic_parameter is not exposed in shared libraries
  * gh#mono/mono#14079 - Interpreter Crash on Reference Source System.Web.Extensions
  * gh#mono/mono#14143 - Techempower Platform Plaintext Hangs on Every Request using LLVM JIT
  * gh#mono/mono#14170 - “Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR)” after debugger pauses and then continues on nested exception
  * gh#mono/mono#14181 - Pango modules.cache contains jenkins builder path
  * gh#mono/mono#14195 - 5.20.1.19 configure fails if enable-cxx but no C++ compiler found
  * gh#mono/mono#14214 - HttpClient.SendAsync() with &gt; 2 GB response body.
  * gh#mono/mono#14215 - Suggestion: switch to 7z native format instead of ZIP for Mono archives
  * gh#mono/mono#14234 - SqliteMembershipProvider initialization bug (Failed to map path ‘/’).
  * gh#mono/mono#14243 - [Wasm] Assertion at mini-llvm.c:2106, condition 'clause-&gt;flags == MONO_EXCEPTION_CLAUSE_NONE || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FINALLY || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FAULT' not met
  * gh#mono/mono#14246 - Interpreter crashes when encountering build-in types
  * gh#mono/mono#14247 - Assertion on 32-bit iOS device with thumb code
  * gh#mono/mono#14255 - Copying from Mono port of Windows Forms doesn’t work in some programs on Linux
  * gh#mono/mono#14261 - LLVM Generates Wrong IndexOf Span code
  * gh#mono/mono#14290 - [ios] Non-public API usage when submitting app
  * gh#mono/mono#14543 - Decoded custom attribute values leak the encoded value receiver
  * gh#mono/mono#14551 - Result for EnumCompareTo differs from Core implementation
  * gh#mono/mono#14585 - [tests] Don’t send HTTP requests to Google
  * gh#mono/mono#14669 - mempool allocate bug?
  * gh#mono/mono#14729 - interpreter tests fail on iOS and tvOS for mscorlib tests
  * gh#mono/mono#14792 - [sdks][ios] Perform the appropriate cast of objc_msgSend and friends
  * gh#mono/mono#14793 - Mono-Native not working on MacOS Catalina
  * gh#mono/mono#14809 - Cannot box IsByRefLike type 'System.ReadOnlySpan'1' in Forms designer tests with 6.0
  * gh#mono/mono#14839 - [xamarin] TimeZoneInfo.Local always returns “Local” name
  * gh#mono/mono#14841 - opt: Unknown command line argument ‘-place-safepoints’ in XI 2019-06 integration
  * gh#mono/mono#14871 - [wasm] System.Text.Json struct serialization fails (but works on CoreCLR)
  * gh#mono/mono#14872 - System.Runtime.CompilerServices.UnsafeTests.ReadWriteDoublePointer test failure on devices in Xamarin.iOS
  * gh#mono/mono#14972 - Xamarin.iOS: System.ExecutionEngineException: Attempting to JIT compile method ‘(wrapper delegate-begin-invoke) System.IAsyncResult System.Func`2&lt;ExecutionEngineExceptionTest.AppDelegate, bool&gt;:begin_invoke_IAsyncResult__this___T_AsyncCallback_object (ExecutionEngineExceptionTest.AppDelegate,System.AsyncCallback,object)’
  * gh#mono/mono#14975 - Mono profiler crashes when running IDE leak tests for VSMac
  * gh#mono/mono#15048 - [aot] Duplicate .fnstart Directive Compiler Error
  * gh#mono/mono#15058 - [2019-06][iOS] Several tests on iOS fail on a 32b device
  * gh#mono/mono#15261 - [iOS][Tests] There are a number of System.Numeric tests that fail on iOS 32b devices
  * gh#mono/mono#15262 - [iOS][Tests] A number of linq tests fail on iOS 32b devices
  * gh#mono/mono#15263 - [iOS][Tests] A number of tests from Microsoft.CSharp fail on iOS 32b devices.
  * gh#mono/mono#15265 - [watchOS][Tests] The System_xunit-test.dll for watchOS includes tests that should be ignored
  * gh#mono/mono#15307 - [iOS][Tests] Several corelib tests crash on iOS32b devices.
  * gh#mono/mono#15328 - [MacOS][Tests] Several tests fail due to a System.IO exception
  * gh#mono/mono#15329 - [MacOS Modern][Tests] System.IO.AnonymousPipe tests are included when they are not supported.
  * gh#mono/mono#15330 - Runtime deadlock
  * gh#mono/mono#15366 - StringBuilder marshalling bug
  * gh#mono/mono#15441 - “pos undeclared” compilation error
  * gh#mono/mono#15692 - Catching IndexOutOfRange doesn’t provide message
  * gh#mono/mono#15751 - Memory leak in mono 6.0.0.313 for delegates with target that are passed to native code
  * gh#mono/mono#15825 - DeflateStream leaks native memory if not explicitly disposed
  * gh#mono/mono#15878 - Crash in mono_coop_mutex_lock while running VS for Mac
  * gh#mono/mono#15887 - [regression] File.GetLastWriteTime fails with specific (GMT+8) timezone
  * gh#mono/mono#15999 - [mini] run regression tests with fullaot+llvm
  * gh#mono/mono#16010 - typeof(object).GetMember(“”) does not return an empty array
  * gh#mono/mono#16024 - Native crash in ves_icall_System_Net_Sockets_Socket_Connect_internal
  * gh#mono/mono#16032 - IOException: Sharing violation on path …
  * gh#mono/mono#16122 - VS 16.2.0 regression: CopyToAsync from DeflateStream to GzipStream throws NotImplementedException
  * gh#mono/mono#16486 - FileSystemEventArgs.FullPath throws ArgumentNullException
  * gh#mono/mono#16712 - SIGSEGV in mono_class_setup_vtable_general</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1575374400">- removed a few internal dependencies because rpms internal dependency
  search accidently added those to the package</changelog>
  <changelog author="azouhr@opensuse.org" date="1579262400">- enable btls for s390x
- remove stale symlinks to prevent from brp-25-symlink errors</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1580817600">- Update to the most current mono release, 6.8.0.96.
  for changes, please refer to the commits log on github: https://github.com/mono/mono/commits/master</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1584619200">- Add aprofutil.exe.mdb and remove aprofutil.pdb, mdoc.exe and
  monolinker.* from file list for aarch64 and ppc64/ppc64le</changelog>
  <changelog author="dmulder@suse.com" date="1587470400">- Update to the most current mono release, 6.8.0.105.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Add mono.attr and install it to %_rpmconfigdir/fileattrs: enable
  the dependency scanner for rpm packages (boo#1152775).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1590321600">- Enable roslyn on aarch64 to build additionnal tools (mdoc.exe, ...)</changelog>
  <changelog author="mgorse@suse.com" date="1590494400">- Add fix-s390x-ucontext.patch: fix the build on 15.2/s390x
  (bsc#1171934).
- Add _constraints to prevent running out of disk space.</changelog>
  <changelog author="idonmez@suse.com" date="1590580800">- Add mono-find-provides and mono-find-requires from Fedora and use
  it instead. Fixes boo#1152775</changelog>
  <changelog author="idonmez@suse.com" date="1590667200">- Fixup mono-find-requires for v1 profiles</changelog>
</package>
<package pkgid="7612843790d2fcb8cafc065f6909cbd88788df4b10eaaf67a5b792a7e4276a7b" name="ibm-data-db2" arch="s390x">
  <version epoch="0" ver="6.8.0" rel="150200.5.2.5"/>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411200">- Update to version 5.10.0.140 (5.10.0 Stable)
- Remove patch: provides-facades.patch
- Add profiler-aot-parse_args-fix.patch:
  * Fix OBS build failure with "free(): invalid pointer" libc error.
- New features and changes:
  * Interpreter: the interpreter is now compiled in by default into Mono, and you can use it by running mono --interpreter
  * Default Interface Methods: the runtime now supports Default Interface Methods, we now only miss the C# compiler support
  * Mono SDKs: this is a new way of building Mono for some of the platforms that we support: Android, iOS and WebAssembly.
  * WebAssembly port: this is the first release where the interpreter can reliably run most of the class libraries test suite.
  * Dedicated Coverage profiler: the coverage profiler has been extracted from the log profiler, making it much more lightweight
  * ARM Memory Barriers: explicitly encode memory barrier type on ARM64, instead of relying on undefined behaviour according to the ARMv8 ABI
  * AOT Size Reduction via Code Deduplication: we now support deduplicating generics code across assemblies
  * Class Libraries: the recently announced .NET 4.7.1 is now supported and available as a specific target via MSBuild configuration; the System.Data assembly was fully replaced with CoreFX implementation resolving many limitations and corner cases issue we had as well as implementing missing features and APIs; significant parts of System.Security assembly implementation were replaced with CoreFX implementation
  * Roslyn compiler: roslyn compiler has been updated to version 2.6.0 which includes all C# 7.2 features
  * The Mono C# compiler: MCS gained support for some more C# 7.x features
- Bugfixes:
  * bxc#19503 - Process.Start on OS X fails silently for missing file
  * bxc#20562 - Seeming valid IL produces invalid result
  * bxc#40699 - Console.ReadXXX does not echo input after TermInfoDriver is initialized
  * bxc#45893 - I18N: EncoderFallbackBuffer.Fallback gets next character instead of the current one
  * bxc#50189 - SGEN XMM scanning: Linux/Intel (32 + 64)
  * bxc#50190 - SGEN FPU scanning: Darwin/ARM64
  * bxc#52675 - HttpListener doesn’t work with SSL
  * bxc#53296 - Latin1Encoding throws exception on Mono when it doesn’t on MS.NET
  * bxc#56003 - URI returns wrong absolute path on OSX when File name is UTF-8
  * bxc#56194 - SIGSEGV on System.Runtime.CompilerServices.RuntimeHelpers.InitializeArray()
  * bxc#56727 - Runtime crashes when disposing DeflateStream
  * bxc#57892 - Static lib in the msi distrib doesn’t resolve all symbols
  * bxc#57893 - mkbundle is not working on Windows
  * bxc#57938 - Differences in behavior Type.Fullname in Mono and .NET Framework when Type is a generic type that is not a generic type definition but contains unresolved type parameters
  * bxc#58400 - System.Uri broken with files
  * bxc#58411 - System.Security.Cryptography.CryptographicException: Store root doesn’t exist
  * bxc#59080 - Type information of underlying type for enums compiled by Mono.CSharp.dll seems to be incorrect
  * bxc#59182 - Crash/SIGSEGV with interop callback with struct parameter from native to managed on Xamarin.Android on armv7
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59393 - NullReferenceException when MonthCalendar clicked out of min/max date
  * bxc#59608 - Attribute MethodImplOptions.AggressiveInlining causes method to always return NULL
  * bxc#59664 - Type.GetType(“”, true) throws ArgumentException on Mono but TypeLoadException on .NET
  * bxc#59832 - [iOS]MT3001 error: Could not AOT the assembly error while building iOS/mobile samples
  * bxc#59881 - DllImport calls a wrong function if its function number greater than 65535
  * bxc#59909 - WebInvokeAttributeTest.RejectTwoParametersWhenNotWrapped() fails on Android
  * bxc#59916 - get_current_locale_name fails under the load with String conversion error: Illegal byte sequence encounted in the input
  * bxc#59956 - [llvm][bitcode] [FAIL] UniqueIdTest.Ctor_Id (System.Runtime.Serialization tests)
  * bxc#60028 - Timer doesn’t throw ODE after Dispose()
  * bxc#60029 - AsyncLocal inconsistency with .NET
  * bxc#60175 - AOT mis-compiles when coverage is used
  * bxc#60224 - Coverage profiler uses type names which don’t exist
  * bxc#60233 - Assertion in dynamic-image.c after 792b5367cd3a6ffa1a192c4d2d7ace3509cbb646
  * bxc#60238 - Mono assertion hit when using csharp repl
  * bxc#60255 - Wrong exception in emulated opcodes
  * bxc#60267 - Inconsistent symlink traversal results
  * bxc#60288 - Large Array Initializer Causes TypeLoadException
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60317 - Stuck WebRequest
  * bxc#60422 - Native crash due to unhandled errno values when accessing files on networked filesystems
  * bxc#60435 - The DataGridViewRow.CreateCellsInstance method is never invoked
  * bxc#60539 - mini-codegen.c:1265, condition `reginfo [sreg].born_in &gt; 0’ not met
  * bxc#60545 - Multiple argument generic with contravariant interface as an argument causes MissingMethodException
  * bxc#60621 - XmlDocument.Load() throws WebException when DTD url is not reachable
  * bxc#60634 - Assertion failure ‘align &gt; 0’ happening as of d15-5
  * bxc#60680 - C# 7 ref returns fail to compile
  * bxc#60771 - Attempting to JIT compile method ‘System.Runtime.CompilerServices.Unsafe:Add (byte&amp;,int)’ while running in aot-only mode
  * bxc#60865 - * Assertion at mini-codegen.c:2264, condition `sp &gt; 0’ not met
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6414 - sbyte comparison broken by optimization
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6721 - Negate operation on uint.MaxValue gives wrong result on arm64
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108.
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6848 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411201">- Add xbuild-use-roslyn-vbc.patch:
  * Make xbuild to use roslyn-vbc on roslyn-enabled builds instead of deprecated vbnc (it is also broken on roslyn-enabled builds)</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1524052800">- Update to version 5.10.1.47 (5.10.1 Stable)
- Patch updated: ucontext.patch</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534075200">- Release 5.12.0.226 (skipped):
- New features and changes:
  * Interpreter: a lot of work has been put in stabilising and passing test suite. Interpreter is able to build the full Base Class Library with Mono C# compiler (mcs)
  * IBM AIX, IBM i, Haiku ports
  * WebAssembly: several issues were fixed around GC and Base Class Libraries
  * Jemalloc: added option to support jemalloc as the malloc(3) library, need --with-jemalloc build options
  * Profiler: improved GC roots reporting
  * PAL: added support for nanosecond resolution in file information on platforms where the information is available
  * Diagnostic enhancements: the diagnostic support to inspect generated native code via MONO_VERBOSE_METHOD environement variable was extended to support multiple entries
  * Class Libraries: HttpWebRequest async handling has been rewritten
  * Class Libraries: a few internal types were decorated with StackTraceHiddenAttribute
  * Class Libraries: System.Security.Cryptography.Xml namespace in the System.Security assembly has been replaced with the CoreFX implementation
  * Class Libraries: ICSharpCode.SharpZipLib assembly was marked as obsolete and will be removed in a future release
  * illinkanalyzer tool: a new tool called the Linker Analyzer was introduced, available via the illinkanalyzer command
  * VB.NET compiler: Roslyn based VB.NET compiler (vbc) now shipped with package. Old vbnc compiled will be deprecated.
- Bugfixes:
  * bxc#41294 - Some Mono threadpool performance counters return 0
  * bxc#45901 - Missing .NET code pages ibm775 &amp; ibm737
  * bxc#56071 - Mono.Security.AuthenticodeBase Doesn’t Support PE32+ image format
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60225 - Coverage output is missing some types and methods
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60359 - AssemblyName.set_CultureName is not implemented
  * bxc#60568 - WaitHandle.WaitOne(int) doesn’t trigger SynchronizationContext.Wait
  * bxc#60756 - A crash with CEE_RET: value type stack: 0 vs. 8
  * bxc#60848 - Incorrect unicode custom attribute decoding
  * bxc#60862 - Stack overflow throws null (null is caught)
  * bxc#60900 - Error using implicit operator with Nullable
  * bxc#60986 - Memory leak when marshalling Delegate to native code
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6264 - Creating a new instance of X.509 certificate out of another, empty instance of X.509 certificate must not throw
  * gh#mono/mono#6283 - Mono is not able to notice a file change in a FileInfo object
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6343 - mono/utils/jemalloc does not exist
  * gh#mono/mono#6349 - messages during make dist: “file name is too long”
  * gh#mono/mono#6379 - Reenable System.Runtime.CompilerServices.Unsafe-xunit test on 32bit
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6411 - System.Numerics structs are incorrect sizes
  * gh#mono/mono#6464 - Socket.Send misses data on Windows
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#xamarin/maccore#628 - mscorlib/Mac/Full: LocalId (MonoTests.System.TimeZoneInfoTest+PropertiesTests.LocalId) fails
  * gh#xamarin/maccore#629 - iOS 32-bit sim: TimeZoneTest.TestCtors (D02) fails</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534161600">- Update to version 5.14.0.177 (5.14.0 Stable)
- Remove patch: profiler-aot-parse_args-fix.patch
- Patch fix-dbg-headers.patch was updated
- Added patch: fix-ppc-64bit-portability-issue.patch:
  * Fix 64bit-portability-issue OBS error when compiling for PPC arch
- New features and changes:
  * Better generic sharing: generic sharing has been improved
  * Memory optimization for handles: reduce the amount of preallocated memory when process requires only a minimal number of handles
  * GC Handling of very large objects: fix handling of objects which are over 4GBs of memory
  * Class Libraries: significant improvements to System.Windows.Forms
  * MCS: C# 7.x support was extended
  * NuGet: the bundled version of NuGet has been updated to 4.7.0
  * mkbundle: a new --mono-api-struct-path option was introduced to allow customization of runtime functions used for the embedding
- Bugfixes:
  * gh#mono/mono#6178 - Log profiler should provide startup time in stream header from same source as event timestamps
  * gh#mono/mono#6186 - Code coverage instrumentation logic should deal with inlining the same way as enter/leave instrumentation
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6211 - Rare shutdown crash in profiler stress tests
  * gh#mono/mono#6266 - ArrayTypeMismatchException when using array of generic ICollection or IList
  * gh#mono/mono#6357 - Keepass crashes when editing an entry notes field in a specific way
  * gh#mono/mono#6579 - Type.GetInterface fails to find implemented interface when ignoreCase: true is used
  * gh#mono/mono#6666 - Invalid cast is not checked for nullable types
  * gh#mono/mono#6752 - System.TermInfoReader cannot handle new NCurses 6 TermInfo files
  * gh#mono/mono#6767 - Add missing APIs to System.Data
  * gh#mono/mono#6788 - nuget restore fails to parse valid json from nuget.org with mono/master
  * gh#mono/mono#6801 - Self-hosted HttpListener gets empty file collection and input stream for multipart PUT or POST requests
  * gh#mono/mono#6812 - MonoProfilerCoverageData::column is equal 0
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#6999 - test_0_time_drift - mono/tests failure
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7093 - Regression in Array interface conversions
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7134 - NullReferenceException while processing concurrent requests with a WCF app
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7145 - [XI] RuntimeFeatureTest.NoNewFeaturesAdded failure in mscorlib tests
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path.
  * gh#mono/mono#7199 - finalizer-abort.exe
  * gh#mono/mono#7200 - Problem building on Arch linux
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7328 - suggest recursive self-calls do not create trampoline
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7378 - WeakAttribute causes all fields within a class to become weak
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7408 - No longer builds with CentOS 6 (GCC 4.4.7)
  * gh#mono/mono#7432 - gcsuppressfinalize.exe CoreCLR test started failing after upgrade to Debian 9
  * gh#mono/mono#7449 - PInvoke to function that takes a struct with an array of double gets incorrect results on Android
  * gh#mono/mono#7460 - w32handles require much memory when the minimum required is much lower
  * gh#mono/mono#7535 - [llvm/bitcode] Crash in mono_class_has_failure (class.c:10037)
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7537 - new object [int.MaxValue] crashes runtime instead of OOM
  * gh#mono/mono#7565 - Generic symbol names exported from libmono
  * gh#mono/mono#7568 - Intermittent failures on bug-80307.exe and other tests using FileSystemWatcher
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7613 - mprof-report can’t read v13 file that Mono.Profiler.Log can
  * gh#mono/mono#7620 - DrawToBitmap in Control.cs does not work
  * gh#mono/mono#7624 - Strict loader still loads incorrect assembly
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7657 - Method is inaccessible from method in nested classes with inheritance.
  * gh#mono/mono#7661 - Suppress the degraded allocation warning for the WebAssembly target
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7696 - LINQ bug (ConcatNIterator.ToArray()?)
  * gh#mono/mono#7729 - [mcs] fails to compile code with Tuple
  * gh#mono/mono#7786 - “mono/metadata/threads.c:3016, condition `internal’ not met” under certain conditions with the soft debugger attached
  * gh#mono/mono#7792 - Failure to AOT compile due to condition `load_opcode != OP_LOADV_MEMBASE’ not met
  * gh#mono/mono#7805 - F# build is broken due to new String.StartsWith overload
  * gh#mono/mono#7822 - Failing to serialize ConcurrentDictionary with BinaryFormatter
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7860 - illinkanalyzer isn’t whitelisted in the macOS package
  * gh#mono/mono#7864 - [wasm] Don’t fail when TaskCreationOptions.LongRunning is used
  * gh#mono/mono#7903 - Mono VS solution has wrong all projects in all profiles used
  * gh#mono/mono#7920 - build broken with –enable-minimal=soft_debug
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * bxc#10087 - Process exit can be blocked if the AppDomain.ProcessExit event hangs
  * bxc#11771 - IsolatedStorageFile.GetFileNames() throws exception w/ nested dirs
  * bxc#12850 - FtpWebRequest does not handle remote paths properly
  * bxc#18941 - Calling Marshal.SizeOf() with an Empty struct using Sequential or Explicit returns 0
  * bxc#19038 - Quitting XS caused MainStoryboard.Storyboard to convert to IB file
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#25224 - stack overflow after printfn something
  * bxc#25444 - WCF method with UriTemplate annotation fails with InvalidOperationException
  * bxc#33208 - System.Reflection.Module.ResolveMember() returning inconsistent results when querying dynamic assemblies
  * bxc#46473 - Error: The object with ID N implements the IObjectReference interface for which all dependencies cannot be resolved. The likely cause is two instances of IObjectReference that have a mutual dependency on each other
  * bxc#53272 - Unhandled Exception System.Collections.Generic.KeyNotFoundException in ikdasm
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59400 - Wrong interface method is called (two interfaces, covariance)
  * bxc#59779 - HttpClient, when using GZIP, hangs while sending multiple requests in parallel.
  * bxc#60065 - Make exception marshaling work with system mono
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60843 - Type 0x15 not handled in custom attr value decoding</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1541678400">- Update to version 5.16.0.179 (5.16.0 Stable)
- Remove patch: fix-64bit-portability-issue.patch
- New features and changes:
  * LLVM: a new option llvmopts has been added to allow override the built-in set of flags passed to the LLVM optimizer
  * Response files support: a response file is a plain-text file that contains strings to be treated as arguments for mono runtime, activated with "--response=FILE" option
  * Assembly loader: the loading of mixed strong named and non-strong names assemblies has been improved to further match .NET desktop behaviour
  * Hybrid suspend: hybrid suspend is a new mechanism that Mono’s garbage collector may use to pause threads when during garbage collection
  * 32-bit floating operations: performing 32-bit floating operations using 32-bit math is now the default settings for the runtime
  * The debugger library: the runtime can be configured using --enable-minimal=soft_debug option and the debugger code will be compiled into a separate libmono-dbg.a library. The library needs to be linked into the app if needed
  * Custom modifiers enhancements: fixed a few issues in handling custom modifiers, especially around type equality with custom modifiers
  * Optimizations: various optimizations for Span&lt;T&gt;, ReadOnlySpan&lt;T&gt;, EqualityComparer&lt;T&gt;.Equals, Enum.HasFlags
  * CoreFX convergence: fully replaced System.Xml.Linq, System.Json, System.Threading.Tasks.Dataflow, System.ServiceModel.Syndication assemblies and System.Net.Mail, System.ComponentModel, System.Text.Encoding namespaces
  * Client certificate support: added support for client certificates for authentication as well as making requests to web servers that use TLS renegotiation
  * System.MathF type: the single-precision math operations are now available in a new System.MathF class
  * Prettier exception stack-traces: prettier exception printer, especially for generated code stack traces, improvements for async exceptions
  * Mono.Options: the arbitrary command nesting is now supported
  * C# compiler: the Roslyn compiler (csc) has been updated to version 2.8.2 which includes C# 7.3 support
  * sn: the sn tool, the utility for signing assemblies, has been updated to support signing PE32+ assemblies
  * mkbundle: mkbundle has been extended to allow further customization of Mono runtime initialization sequence
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#6173 - Periodic heapshot mode calculates time difference incorrectly
  * gh#mono/mono#6466 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing on newer Ubuntu
  * gh#mono/mono#6647 - Jagged arrays cannot be cast to IList&lt;&gt;
  * gh#mono/mono#6834 - Frequent timing out of the ‘monitor-abort’ tests on CI
  * gh#mono/mono#6936 - Mono runtime doesn’t check modreqs for overriding methods
  * gh#mono/mono#7058 - [interp] pinvoke.exe is flaky
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7247 - CoreFX System.Text namespace
  * gh#mono/mono#7260 - StackTrace.GetFrames() does not return frames from captured traces
  * gh#mono/mono#7305 - Stack overflow when hosting a WCF service when contract interface inherits other interfaces
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7402 - [interp] fix System.Threading.ThreadTest.Test_Interrupt
  * gh#mono/mono#7525 - Profiler exception clause reporting is broken
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7649 - Exception stacktrace is null when task delegate is created from local function
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7683 - Assertion at /Users/builder/data/lanes/5808/1c6f300e/source/xamarin-macios/external/mono/mono/profiler/log.c:546, condition `mono_lls_insert (&amp;log_profiler.profiler_thread_list, hp, &amp;thread-&gt;node) &amp;&amp; “Why can’t we insert the thread in the LLS?”’ not met
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7716 - mono’s mscorlib.xml descriptor file seems incomplete for Xamarin.Mac
  * gh#mono/mono#7731 - MKBundle fails on Windows due to a folder check/missing folder
  * gh#mono/mono#7785 - Dead link (404) in a runtime execution engine exception
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7944 - CreateDelegate produces delegate wrapping incorrect method
  * gh#mono/mono#7947 - Missing forwarders from System.Runtime.Extensions
  * gh#mono/mono#8036 - Update API diff to ignore more attributes
  * gh#mono/mono#8074 - signing problems in preset fullaot build
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8112 - Wrong maximal instruction length of instruction tailcall_membase on ARM64
  * gh#mono/mono#8122 - CoreFX System.Xml.Linq
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8149 - Assembly.LoadFile and Assembly.LoadFrom have same behavior
  * gh#mono/mono#8175 - Changing eglib doesn’t rebuild mono
  * gh#mono/mono#8177 - [wasm] master broken due to WASM-ERR: missing function: mono_debugger_agent_init
  * gh#mono/mono#8218 - SN fails when signing x64 assemblies
  * gh#mono/mono#8250 - assertion failure fullaot llvm System.Drawing.dll
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8282 - [android] respect maximum length of a message when using __android_log_write ()
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8321 - Build break/test failures on FullAOT+LLVM configuration
  * gh#mono/mono#8329 - mono –interpreter got * Assertion at ..\mono\mini\interp\interp.c:3557, condition `csig-&gt;call_convention == MONO_CALL_DEFAULT’ not met
  * gh#mono/mono#8340 - Issue with black text on console, possibly ncurses
  * gh#mono/mono#8356 - Hybrid suspend: backtrace in GC Unsafe mode considered harmful (on Linux)
  * gh#mono/mono#8372 - unload-appdomain-on-shutdown.exe flaky test
  * gh#mono/mono#8407 - TypeDescriptorTest.TestCreateDesigner and TestGetAttributes broken on FullAOT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8422 - Ambiguous call Encoding.GetByteCount(char[], int, int) and Encoding.GetByteCount(string, int, int)
  * gh#mono/mono#8430 - Fails to compile without AOT (enable-minimal=profiler,debug,aot)
  * gh#mono/mono#8447 - ilasm can’t assemble vbbyrefstr parameters
  * gh#mono/mono#8469 - API/Project Files diff renderer stops at XML end comment –&gt;
  * gh#mono/mono#8473 - ThreadPoolTests.PerformanceCounter_WorkItems fails occasionally
  * gh#mono/mono#8488 - Doesn’t compile with Clang on ARM64
  * gh#mono/mono#8572 - Build fails on Redhat 6.8 with GCC 4.4.7
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8587 - configure.ac G_HAVE_ISO_VARARGS problems
  * gh#mono/mono#8597 - System.Reflection.Emit: ParameterBuilder.SetConstant(value) throws ArgumentException for nullable value typed parameters
  * gh#mono/mono#8623 - Complete the System.Memory types import
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * gh#mono/mono#8701 - AOT failure if ref readonly with generics is used
  * gh#mono/mono#8712 - FileSystemWatcher only works for one instance
  * gh#mono/mono#8721 - System.Threading.Tasks.TaskFactoryTests.FromAsync_BeginCallback failing under XM with 2018-04
  * gh#mono/mono#8726 - Loading denied assemblies via Assembly.LoadFrom can cause issues, eg. for VSMac
  * gh#mono/mono#8759 - Build of Master fails with GCC 4.4.7
  * gh#mono/mono#8787 - ThreadPrincipalTests.PrincipalFlowsToAsyncTask failure on device
  * gh#mono/mono#8820 - [loader] Mono is too strict when checking for already loaded assemblies.
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#8866 - jit profiler option crashes iOS apps
  * gh#mono/mono#8897 - “Microsoft.Managed.Core.targets” is missing from roslyn-binaries
  * gh#mono/mono#8915 - Using BinaryFormatter to deserialize an array in a struct in a parent class fails with unfriendly exception [reproducible test case i promise]
  * gh#mono/mono#8979 - configure script incorrectly assumes functions are available with some conditions
  * gh#mono/mono#9002 - ServiceControllerTest.cs is designed to fail.
  * gh#mono/mono#9023 - Two ValueType properties initialization inline fails in mono-wasm
  * gh#mono/mono#9031 - HttpWebRequest.EndGetRequestStream throws wrong exception on abort
  * gh#mono/mono#9033 - DynamicMethod creation fails with “method arguments are incompatible”
  * gh#mono/mono#9179 - CI build breakage for 2018-04, msbuild
  * gh#mono/mono#9234 - [System]: Renegotiation in AppleTls requires OS X 10.12+
  * gh#mono/mono#9277 - Cannot get the exit code from a non-child process on Unix (on Windows)
  * gh#mono/mono#9318 - watchOS: “fastcc” not supported with Xcode 10’s clang
  * gh#mono/mono#9753 - [loader] LoadFile from application base should load in default context
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9869 - iOS: mini test failure in release/llvm mode (JitTests.Math: Expected: 0 But was: 1)
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9996 - The type initializer for ‘System.Data.Entity.Core.Objects.ELinq.ExpressionConverter’ threw an exception. (regression in Mono 5.14)
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#23668 - System.Net.Http.Formatting should not contain Newtonsoft.Json
  * bxc#26983 - Console properties might deadlock for background properties
  * bxc#46917 - Incorrect validation checks in message formater
  * bxc#60065 - Make exception marshaling work with system mono</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1550145600">- Update to version 5.18.0.240, release skipped
- New features and changes:
  * AOT: Few hard to track race conditions in trampolines unboxing for AOT backend targetting amd64 were fixed
  * Interpreter: Added low-level optimizations, support Xamarin native types (nint/nuint)
  * Custom Marshalers: The logic handling custom marshalers, types implementing IICustomMarshaler has been mostly rewritten
  * Optimizations: The intrinsics built on top of SSE41 for Math.Round/Math.Floor/Math.Ceiling were added
  * Windows: Mono Windows cross-compiler is using the same LLVM release branch as Linux resolving issues in scenarios where llvm-config.exe can’t be run (none WSL/CygWin build target)
  * CoreFX convergence: more CoreFX code was imported in particular in System.Reflection namespace, Many common types in mscorlib System namespace are now fully CoreFX based including System.Math
  * Mono.Options: A new CommandSet.GetCompletions() method was introduced
  * System.Runtime.InteropServices: It’s now possible to use RuntimeInformation API to detect ARM and ARM64 platforms
  * MSBuild: Reference assemblies for .NET 4.7.2 are included to allow targeting .NET Framework 4.7.2 using MSBuild on Mono
- Bugfixes:
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1555070400">- Update to version 5.20.1 Stable (5.20.1.19)
- Patch fix-dbg-headers.patch was updated
- Patch ucontext.patch was removed
- Added libtest.patch from upstream: fix build failure
- New features and changes:
  * System.Data: the support for SSPI (Security Support Provider Interface) in System.Data assembly has been added. Additional package (krb5) needs to be installed in order to use this feature.
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10735 - mono64[80780:1186894] error: * Assertion: should not be reached at debugger-agent.c:6619
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10834 - Error loading generic override of in parameter
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11317 - Unexpected behaviour of DateTime.ToString with Korean language on iOS/Android
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * gh#mono/mono#11956 - os-event-unix.c:82 assert(event) failure
  * gh#mono/mono#11965 - [iOS/32bit/device] mscorlib test failures: DoubleFormatterTest.TestFormatStringsN# and DoubleTest.LongLongValueRoundtrip
  * gh#mono/mono#12069 - MethodInfo.ReturnParameter.IsDefined(type) throws IndexOutOfRangeException
  * gh#mono/mono#12130 - [watchOS] MT3001: Could not AOT the assembly mscorlib.dll
  * gh#mono/mono#12235 - Crash while profiling roslyn compiler server
  * gh#mono/mono#12344 - FastCopy may silently fail to do anything
  * gh#mono/mono#12362 - Problem with DefaultValueAttribute and Color values
  * gh#mono/mono#12421 - Task calls SynchronizationContext.Post on cancelling
  * gh#mono/mono#12461 - ReflectionModelServices.IsExportFactoryImportDefinition should not throw
  * gh#mono/mono#12724 - xtro-sharpie.exe crashes with “Cannot transition thread 0x10c3ef5c0 from STATE_BLOCKING with DO_BLOCKING”
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8225 - Mono mkbundle output executable throws: “Error mapping file: No error”
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9418 - SslStream.AuthenticateAsClient throws wrong exception types
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9951 - cross build regressed wrt System.Native and “shm_open that works well enough with mmap”
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133266).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1574251200">- update to new version 6.4.0
- removed libtest.patch because it was fixed upstream
- New features and changes:
  * Highlights
    C# compiler support for C# 8 language version
    .NET Standard 2.1 support
    Updated libgdiplus to 6.0.2
    Notarized macOS installer package
  * Hardened Runtime and Notarization support on macOS
    The Mono binary installed by the .pkg for macOS is now using the Hardened Runtime capabilities and the package was notarized to comply with Apple’s new restrictions: https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution.
    This allows the package to work on the upcoming macOS 10.15 Catalina without showing warning dialogs.
  * Interpreter improvements
    The Mono interpreter was updated to support the Windows operating system.
    We also completed a lot of groundwork for upcoming future optimizations in the interpreter, like constant folding.
  * Bitness independent AOT cross compiler
    The Ahead-Of-Time (AOT) cross compiler was updated to no longer require being executed with the same bitness that it should generate code for. This means a 64bit Mono can now emit AOT code for 32bit targets.
    This work was mainly done to support executing the AOT cross compiler on macOS 10.15 Catalina (which is 64bit only) as we still need to generate code for 32bit targets like older iPhone and Apple Watch devices.
  * WebAssembly
    We continue to work on making our WebAssembly support better. Various sets of issues with the debugger have been resolved in this release and general performance and feature work is happening as well.
  * LLVM improvements
    We now leave it up to the LLVM framework to insert safepoints. Later optimizations can understand safepoints then which leads to better generated code. See https://github.com/mono/mono/pull/11789
    The LLVM backend is also supported on the Windows operating system now.
  * PPC JIT optimizations
    The PowerPC JIT received a bunch of optimization from community contributor Calvin Buckley (@NattyNarwhal).
  * Experimental build support for Fuchsia
    A very minimal and experimental support for building Mono targeting the Fuchsia OS landed in the build system.
  * .NET Standard 2.1 support
    We updated our class libraries to support the latest additions to .NET Standard. You can now run a library compiled against the .NET Standard 2.1 specification on Mono.
  * CoreFX integration
    We continued to replace some of our classes with the implementation from CoreFX to improve performance and compatibility with .NET.
  * libgdiplus update to 6.0.2
    The libgdiplus native library is used for implementing System.Drawing on Unix platforms. This release contains many important improvements from our community members.
  * System.Windows.Forms
    More fixes and layout improvements for different controls made by external contributors have landed in this release .
  * C# 8 language version support in csc and msbuild
    The C# compiler and msbuild tooling were updated to versions that support the final C# 8 language specification.
    The Default Interface Methods (DIM) feature also received a few runtime enhancements.
  * NuGet
    Bundled NuGet version has been upgraded to 5.2 RTM.
- Resolved Issues
  * gh#mono/mono#7377 - [Mono.Debugger.Soft] Connections are not properly closed
  * gh#mono/mono#7452 - Download link for macOS is osbsolete (5.8 instead of 5.10)
  * gh#mono/mono#7845 - Don’t install monograph
  * gh#mono/mono#8360 - [System.Net.Sockets] flakey failures of SocketTest.TestSelect1 on Darwin systems
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8747 - FileSystemWatcher calls event after it is Disposed
  * gh#mono/mono#9267 - Release tarballs should be compressed with xz
  * gh#mono/mono#9621 - 64 bit cross compilers targeting 32 bit platforms
  * gh#mono/mono#9664 - DateTime.Now or Timezone information do not transition out of DST for all time zones
  * gh#mono/mono#10101 - ref local of jagged array leads to InvalidProgramException
  * gh#mono/mono#10277 - [Reflection] Event accessors don’t inherit ReflectedType
  * gh#mono/mono#10645 - WebException is thrown when reading from WebException.Response.GetResponse() stream
  * gh#mono/mono#11431 - Add Brotli compression to existing System.IO.Compression assembly
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11643 - mkbudle problem - Illegal byte sequence
  * gh#mono/mono#12157 - new DriveInfo(Path.GetTempPath()) crashes on macOS
  * gh#mono/mono#12182 - LLVM AOT caches require SSE4.1-capable CPU
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12839 - [Windows] block_guard_restore_aligment_on_exit.exe frequently times out on CI
  * gh#mono/mono#12843 - Mono Android debugger crashes using HttpClient wrapped in Async Method
  * gh#mono/mono#12871 - wasm var co = new System.Net.CookieContainer(); error System.DllNotFoundException: libc
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#12945 - corlib-xunit tests taking 10x longer in the coop configuration
  * gh#mono/mono#12964 - [debugger][wasm] Assertion at mono/metadata/loader.c:2500, condition ‘' not met
  * gh#mono/mono#12981 - [WASM] Transform.c:2856, condition `' not met
  * gh#mono/mono#12988 - [WASM] LLVM failed for ‘ObservableCollectionExtensions.InternalUpdate’: incoming phi sreg1
  * gh#mono/mono#12998 - [WASM] llvmonly-runtime.c:804, condition `' not met
  * gh#mono/mono#13028 - FSharpType.IsUnion broken inside of F# Interactive due to missing System.Reflection.Emit.AssemblyBuilder.ReflectionOnly implementation
  * gh#mono/mono#13030 - Directory.GetLogicalDrives () missing SystemNative_GetAllMountPoints pal function
  * gh#mono/mono#13056 - AV inside mono_local_cprop+0x23f
  * gh#mono/mono#13150 - [WinForms] Related Forms closing
  * gh#mono/mono#13163 - Task: Use async DNS resolution in Socket and web stack code.
  * gh#mono/mono#13195 - [wasm][ci] Intermittent failures with ChakraCore Tests
  * gh#mono/mono#13224 - iOS SDKs test app build doesn’t work when not in sdks/ios directory
  * gh#mono/mono#13231 - CGPattern causes “Attempting to JIT compile method” exception since VS 7.5
  * gh#mono/mono#13250 - Setting CustomErrorsMode for RemotingConfiguration throws NotImplementedException
  * gh#mono/mono#13261 - [sdb] StackOverflow when invoking many methods from client debugger
  * gh#mono/mono#13282 - [SWF] Method OnClosed should pass FormClosedEventArgs type, instead of EventArgs
  * gh#mono/mono#13284 - Checked ulong relational operation throws wrong OverflowException on armeabi-v7a
  * gh#mono/mono#13297 - [WASM] decompose.c:1471, condition `cfg-&gt;cbb == first_bb’ not met
  * gh#mono/mono#13311 - [sdb] Failure to suspend
  * gh#mono/mono#13319 - Crash executing static methods on interfaces
  * gh#mono/mono#13350 - MemberInfo.ReflectedType returns wrong reflected type for an event method
  * gh#mono/mono#13374 - Crash executing default implemented property in interface
  * gh#mono/mono#13412 - Bump netstandard.dll assembly version to 2.1
  * gh#mono/mono#13445 - Fork regression in Mojave due to MAP_JIT
  * gh#mono/mono#13452 - [Linux] Mono (5.18.0.268) crashes in String:IndexOf(char value, int startIndex)
  * gh#mono/mono#13454 - watchOS apps crash on launch if built with LLVM
  * gh#mono/mono#13455 - AOT crashes with “MVAR 0 (Ts) cannot be expanded with type 0x1e” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13460 - AOT crashes with “Instruction does not dominate all uses” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13463 - [WASM] Mixed Mode: function signature mismatch
  * gh#mono/mono#13466 - Crash at runtime likely related to protected accessibility of a method declared in an interface.
  * gh#mono/mono#13467 - Unexpected System.MethodAccessException is thrown for a protected method declared in an interface
  * gh#mono/mono#13478 - Undefined symbol ___sync_lock_test_and_set_4 on armv7 in xamarin-macios 2019-02
  * gh#mono/mono#13479 - System.Runtime.CompilerServices.UnsafeTests attempting to JIT compile on iOS devices
  * gh#mono/mono#13508 - ILAsm: adds ‘virtual’ attribute to sealed default interface methods
  * gh#mono/mono#13522 - AOT issue on WatchOS: “* Assertion at mini-llvm.c:9381, condition `fields [2 + i]’ not met “
  * gh#mono/mono#13526 - The repl (monotouch_tv_runtime) assemblies don’t work for tvOS
  * gh#mono/mono#13597 - Runtime Error when using span on LeetCode
  * gh#mono/mono#13607 - Assertion in xamarin-macios link sdk test: “mini-generic-sharing.c:568, condition `is_ok (error)’ not met, function:inflate_info, Could not inflate generic type, due to MVAR 0 (T_ULONG) cannot be expanded with type 0x1e”
  * gh#mono/mono#13610 - Returning tuple broken when enabling fullAOT+LLVM
  * gh#mono/mono#13639 - mono-cil-strip crashes when called against the monotouch_Microsoft.CSharp_xunit-test.dll
  * gh#mono/mono#13654 - Interpreter Crash When Doing Fancy Reflection
  * gh#mono/mono#13672 - [2019-02] Xamarin.Android runtime tests crash on free
  * gh#mono/mono#13714 - Exception during static constructor loading is not cleaned up
  * gh#mono/mono#13775 - New Mono drop crashing in C# symbol tests
  * gh#mono/mono#13787 - [wasm] Uint8ClampedArray.From(byte[]) invalid cast
  * gh#mono/mono#13804 - [MacSDK] pkg-config is 32-bit only
  * gh#mono/mono#13834 - Mac crash reports do not give the right SizeOfImage
  * gh#mono/mono#13878 - System.Reflection.Emit.DynamicMethod:CreateDelegate (?) crashes XM apps when under hardened runtime
  * gh#mono/mono#13888 - (FullAOT) Ran out of trampolines of type 3
  * gh#mono/mono#13889 - [llvm] Bounds checks are not eliminated
  * gh#mono/mono#13923 - [DIM] [CoreCLR Test] boring not working
  * gh#mono/mono#13925 - [DIM] [CoreCLR Test] abstractcalls not working
  * gh#mono/mono#13941 - Crash During AOT of ASP.NET Core Assemblies
  * gh#mono/mono#13974 - mono: symbol lookup error: /usr/lib/libmono-llvm.so: undefined symbol: mono_class_get_generic_class
  * gh#mono/mono#14005 - Method mono_type_is_generic_parameter is not exposed in shared libraries
  * gh#mono/mono#14079 - Interpreter Crash on Reference Source System.Web.Extensions
  * gh#mono/mono#14143 - Techempower Platform Plaintext Hangs on Every Request using LLVM JIT
  * gh#mono/mono#14170 - “Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR)” after debugger pauses and then continues on nested exception
  * gh#mono/mono#14181 - Pango modules.cache contains jenkins builder path
  * gh#mono/mono#14195 - 5.20.1.19 configure fails if enable-cxx but no C++ compiler found
  * gh#mono/mono#14214 - HttpClient.SendAsync() with &gt; 2 GB response body.
  * gh#mono/mono#14215 - Suggestion: switch to 7z native format instead of ZIP for Mono archives
  * gh#mono/mono#14234 - SqliteMembershipProvider initialization bug (Failed to map path ‘/’).
  * gh#mono/mono#14243 - [Wasm] Assertion at mini-llvm.c:2106, condition 'clause-&gt;flags == MONO_EXCEPTION_CLAUSE_NONE || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FINALLY || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FAULT' not met
  * gh#mono/mono#14246 - Interpreter crashes when encountering build-in types
  * gh#mono/mono#14247 - Assertion on 32-bit iOS device with thumb code
  * gh#mono/mono#14255 - Copying from Mono port of Windows Forms doesn’t work in some programs on Linux
  * gh#mono/mono#14261 - LLVM Generates Wrong IndexOf Span code
  * gh#mono/mono#14290 - [ios] Non-public API usage when submitting app
  * gh#mono/mono#14543 - Decoded custom attribute values leak the encoded value receiver
  * gh#mono/mono#14551 - Result for EnumCompareTo differs from Core implementation
  * gh#mono/mono#14585 - [tests] Don’t send HTTP requests to Google
  * gh#mono/mono#14669 - mempool allocate bug?
  * gh#mono/mono#14729 - interpreter tests fail on iOS and tvOS for mscorlib tests
  * gh#mono/mono#14792 - [sdks][ios] Perform the appropriate cast of objc_msgSend and friends
  * gh#mono/mono#14793 - Mono-Native not working on MacOS Catalina
  * gh#mono/mono#14809 - Cannot box IsByRefLike type 'System.ReadOnlySpan'1' in Forms designer tests with 6.0
  * gh#mono/mono#14839 - [xamarin] TimeZoneInfo.Local always returns “Local” name
  * gh#mono/mono#14841 - opt: Unknown command line argument ‘-place-safepoints’ in XI 2019-06 integration
  * gh#mono/mono#14871 - [wasm] System.Text.Json struct serialization fails (but works on CoreCLR)
  * gh#mono/mono#14872 - System.Runtime.CompilerServices.UnsafeTests.ReadWriteDoublePointer test failure on devices in Xamarin.iOS
  * gh#mono/mono#14972 - Xamarin.iOS: System.ExecutionEngineException: Attempting to JIT compile method ‘(wrapper delegate-begin-invoke) System.IAsyncResult System.Func`2&lt;ExecutionEngineExceptionTest.AppDelegate, bool&gt;:begin_invoke_IAsyncResult__this___T_AsyncCallback_object (ExecutionEngineExceptionTest.AppDelegate,System.AsyncCallback,object)’
  * gh#mono/mono#14975 - Mono profiler crashes when running IDE leak tests for VSMac
  * gh#mono/mono#15048 - [aot] Duplicate .fnstart Directive Compiler Error
  * gh#mono/mono#15058 - [2019-06][iOS] Several tests on iOS fail on a 32b device
  * gh#mono/mono#15261 - [iOS][Tests] There are a number of System.Numeric tests that fail on iOS 32b devices
  * gh#mono/mono#15262 - [iOS][Tests] A number of linq tests fail on iOS 32b devices
  * gh#mono/mono#15263 - [iOS][Tests] A number of tests from Microsoft.CSharp fail on iOS 32b devices.
  * gh#mono/mono#15265 - [watchOS][Tests] The System_xunit-test.dll for watchOS includes tests that should be ignored
  * gh#mono/mono#15307 - [iOS][Tests] Several corelib tests crash on iOS32b devices.
  * gh#mono/mono#15328 - [MacOS][Tests] Several tests fail due to a System.IO exception
  * gh#mono/mono#15329 - [MacOS Modern][Tests] System.IO.AnonymousPipe tests are included when they are not supported.
  * gh#mono/mono#15330 - Runtime deadlock
  * gh#mono/mono#15366 - StringBuilder marshalling bug
  * gh#mono/mono#15441 - “pos undeclared” compilation error
  * gh#mono/mono#15692 - Catching IndexOutOfRange doesn’t provide message
  * gh#mono/mono#15751 - Memory leak in mono 6.0.0.313 for delegates with target that are passed to native code
  * gh#mono/mono#15825 - DeflateStream leaks native memory if not explicitly disposed
  * gh#mono/mono#15878 - Crash in mono_coop_mutex_lock while running VS for Mac
  * gh#mono/mono#15887 - [regression] File.GetLastWriteTime fails with specific (GMT+8) timezone
  * gh#mono/mono#15999 - [mini] run regression tests with fullaot+llvm
  * gh#mono/mono#16010 - typeof(object).GetMember(“”) does not return an empty array
  * gh#mono/mono#16024 - Native crash in ves_icall_System_Net_Sockets_Socket_Connect_internal
  * gh#mono/mono#16032 - IOException: Sharing violation on path …
  * gh#mono/mono#16122 - VS 16.2.0 regression: CopyToAsync from DeflateStream to GzipStream throws NotImplementedException
  * gh#mono/mono#16486 - FileSystemEventArgs.FullPath throws ArgumentNullException
  * gh#mono/mono#16712 - SIGSEGV in mono_class_setup_vtable_general</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1575374400">- removed a few internal dependencies because rpms internal dependency
  search accidently added those to the package</changelog>
  <changelog author="azouhr@opensuse.org" date="1579262400">- enable btls for s390x
- remove stale symlinks to prevent from brp-25-symlink errors</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1580817600">- Update to the most current mono release, 6.8.0.96.
  for changes, please refer to the commits log on github: https://github.com/mono/mono/commits/master</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1584619200">- Add aprofutil.exe.mdb and remove aprofutil.pdb, mdoc.exe and
  monolinker.* from file list for aarch64 and ppc64/ppc64le</changelog>
  <changelog author="dmulder@suse.com" date="1587470400">- Update to the most current mono release, 6.8.0.105.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Add mono.attr and install it to %_rpmconfigdir/fileattrs: enable
  the dependency scanner for rpm packages (boo#1152775).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1590321600">- Enable roslyn on aarch64 to build additionnal tools (mdoc.exe, ...)</changelog>
  <changelog author="mgorse@suse.com" date="1590494400">- Add fix-s390x-ucontext.patch: fix the build on 15.2/s390x
  (bsc#1171934).
- Add _constraints to prevent running out of disk space.</changelog>
  <changelog author="idonmez@suse.com" date="1590580800">- Add mono-find-provides and mono-find-requires from Fedora and use
  it instead. Fixes boo#1152775</changelog>
  <changelog author="idonmez@suse.com" date="1590667200">- Fixup mono-find-requires for v1 profiles</changelog>
</package>
<package pkgid="10dd221c1cda1efb852fdd316cbfc27fec94d554c25d0ae884f25c3f1bca22fe" name="ibm-data-db2" arch="x86_64">
  <version epoch="0" ver="6.8.0" rel="150200.5.2.5"/>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411200">- Update to version 5.10.0.140 (5.10.0 Stable)
- Remove patch: provides-facades.patch
- Add profiler-aot-parse_args-fix.patch:
  * Fix OBS build failure with "free(): invalid pointer" libc error.
- New features and changes:
  * Interpreter: the interpreter is now compiled in by default into Mono, and you can use it by running mono --interpreter
  * Default Interface Methods: the runtime now supports Default Interface Methods, we now only miss the C# compiler support
  * Mono SDKs: this is a new way of building Mono for some of the platforms that we support: Android, iOS and WebAssembly.
  * WebAssembly port: this is the first release where the interpreter can reliably run most of the class libraries test suite.
  * Dedicated Coverage profiler: the coverage profiler has been extracted from the log profiler, making it much more lightweight
  * ARM Memory Barriers: explicitly encode memory barrier type on ARM64, instead of relying on undefined behaviour according to the ARMv8 ABI
  * AOT Size Reduction via Code Deduplication: we now support deduplicating generics code across assemblies
  * Class Libraries: the recently announced .NET 4.7.1 is now supported and available as a specific target via MSBuild configuration; the System.Data assembly was fully replaced with CoreFX implementation resolving many limitations and corner cases issue we had as well as implementing missing features and APIs; significant parts of System.Security assembly implementation were replaced with CoreFX implementation
  * Roslyn compiler: roslyn compiler has been updated to version 2.6.0 which includes all C# 7.2 features
  * The Mono C# compiler: MCS gained support for some more C# 7.x features
- Bugfixes:
  * bxc#19503 - Process.Start on OS X fails silently for missing file
  * bxc#20562 - Seeming valid IL produces invalid result
  * bxc#40699 - Console.ReadXXX does not echo input after TermInfoDriver is initialized
  * bxc#45893 - I18N: EncoderFallbackBuffer.Fallback gets next character instead of the current one
  * bxc#50189 - SGEN XMM scanning: Linux/Intel (32 + 64)
  * bxc#50190 - SGEN FPU scanning: Darwin/ARM64
  * bxc#52675 - HttpListener doesn’t work with SSL
  * bxc#53296 - Latin1Encoding throws exception on Mono when it doesn’t on MS.NET
  * bxc#56003 - URI returns wrong absolute path on OSX when File name is UTF-8
  * bxc#56194 - SIGSEGV on System.Runtime.CompilerServices.RuntimeHelpers.InitializeArray()
  * bxc#56727 - Runtime crashes when disposing DeflateStream
  * bxc#57892 - Static lib in the msi distrib doesn’t resolve all symbols
  * bxc#57893 - mkbundle is not working on Windows
  * bxc#57938 - Differences in behavior Type.Fullname in Mono and .NET Framework when Type is a generic type that is not a generic type definition but contains unresolved type parameters
  * bxc#58400 - System.Uri broken with files
  * bxc#58411 - System.Security.Cryptography.CryptographicException: Store root doesn’t exist
  * bxc#59080 - Type information of underlying type for enums compiled by Mono.CSharp.dll seems to be incorrect
  * bxc#59182 - Crash/SIGSEGV with interop callback with struct parameter from native to managed on Xamarin.Android on armv7
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59393 - NullReferenceException when MonthCalendar clicked out of min/max date
  * bxc#59608 - Attribute MethodImplOptions.AggressiveInlining causes method to always return NULL
  * bxc#59664 - Type.GetType(“”, true) throws ArgumentException on Mono but TypeLoadException on .NET
  * bxc#59832 - [iOS]MT3001 error: Could not AOT the assembly error while building iOS/mobile samples
  * bxc#59881 - DllImport calls a wrong function if its function number greater than 65535
  * bxc#59909 - WebInvokeAttributeTest.RejectTwoParametersWhenNotWrapped() fails on Android
  * bxc#59916 - get_current_locale_name fails under the load with String conversion error: Illegal byte sequence encounted in the input
  * bxc#59956 - [llvm][bitcode] [FAIL] UniqueIdTest.Ctor_Id (System.Runtime.Serialization tests)
  * bxc#60028 - Timer doesn’t throw ODE after Dispose()
  * bxc#60029 - AsyncLocal inconsistency with .NET
  * bxc#60175 - AOT mis-compiles when coverage is used
  * bxc#60224 - Coverage profiler uses type names which don’t exist
  * bxc#60233 - Assertion in dynamic-image.c after 792b5367cd3a6ffa1a192c4d2d7ace3509cbb646
  * bxc#60238 - Mono assertion hit when using csharp repl
  * bxc#60255 - Wrong exception in emulated opcodes
  * bxc#60267 - Inconsistent symlink traversal results
  * bxc#60288 - Large Array Initializer Causes TypeLoadException
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60317 - Stuck WebRequest
  * bxc#60422 - Native crash due to unhandled errno values when accessing files on networked filesystems
  * bxc#60435 - The DataGridViewRow.CreateCellsInstance method is never invoked
  * bxc#60539 - mini-codegen.c:1265, condition `reginfo [sreg].born_in &gt; 0’ not met
  * bxc#60545 - Multiple argument generic with contravariant interface as an argument causes MissingMethodException
  * bxc#60621 - XmlDocument.Load() throws WebException when DTD url is not reachable
  * bxc#60634 - Assertion failure ‘align &gt; 0’ happening as of d15-5
  * bxc#60680 - C# 7 ref returns fail to compile
  * bxc#60771 - Attempting to JIT compile method ‘System.Runtime.CompilerServices.Unsafe:Add (byte&amp;,int)’ while running in aot-only mode
  * bxc#60865 - * Assertion at mini-codegen.c:2264, condition `sp &gt; 0’ not met
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6414 - sbyte comparison broken by optimization
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6721 - Negate operation on uint.MaxValue gives wrong result on arm64
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108.
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6848 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1522411201">- Add xbuild-use-roslyn-vbc.patch:
  * Make xbuild to use roslyn-vbc on roslyn-enabled builds instead of deprecated vbnc (it is also broken on roslyn-enabled builds)</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1524052800">- Update to version 5.10.1.47 (5.10.1 Stable)
- Patch updated: ucontext.patch</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534075200">- Release 5.12.0.226 (skipped):
- New features and changes:
  * Interpreter: a lot of work has been put in stabilising and passing test suite. Interpreter is able to build the full Base Class Library with Mono C# compiler (mcs)
  * IBM AIX, IBM i, Haiku ports
  * WebAssembly: several issues were fixed around GC and Base Class Libraries
  * Jemalloc: added option to support jemalloc as the malloc(3) library, need --with-jemalloc build options
  * Profiler: improved GC roots reporting
  * PAL: added support for nanosecond resolution in file information on platforms where the information is available
  * Diagnostic enhancements: the diagnostic support to inspect generated native code via MONO_VERBOSE_METHOD environement variable was extended to support multiple entries
  * Class Libraries: HttpWebRequest async handling has been rewritten
  * Class Libraries: a few internal types were decorated with StackTraceHiddenAttribute
  * Class Libraries: System.Security.Cryptography.Xml namespace in the System.Security assembly has been replaced with the CoreFX implementation
  * Class Libraries: ICSharpCode.SharpZipLib assembly was marked as obsolete and will be removed in a future release
  * illinkanalyzer tool: a new tool called the Linker Analyzer was introduced, available via the illinkanalyzer command
  * VB.NET compiler: Roslyn based VB.NET compiler (vbc) now shipped with package. Old vbnc compiled will be deprecated.
- Bugfixes:
  * bxc#41294 - Some Mono threadpool performance counters return 0
  * bxc#45901 - Missing .NET code pages ibm775 &amp; ibm737
  * bxc#56071 - Mono.Security.AuthenticodeBase Doesn’t Support PE32+ image format
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60225 - Coverage output is missing some types and methods
  * bxc#60298 - LayoutKind.Explicit, Size = 12 ignored with 64bit alignment
  * bxc#60359 - AssemblyName.set_CultureName is not implemented
  * bxc#60568 - WaitHandle.WaitOne(int) doesn’t trigger SynchronizationContext.Wait
  * bxc#60756 - A crash with CEE_RET: value type stack: 0 vs. 8
  * bxc#60848 - Incorrect unicode custom attribute decoding
  * bxc#60862 - Stack overflow throws null (null is caught)
  * bxc#60900 - Error using implicit operator with Nullable
  * bxc#60986 - Memory leak when marshalling Delegate to native code
  * bxc#61202 - Fatal error when adding aspect ratio constraint
  * gh#mono/mono#6169 - Thread objects are being leaked
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6192 - System.Reflection.Emit: PropertyBuilder with generic type doesn’t add generic parameter
  * gh#mono/mono#6264 - Creating a new instance of X.509 certificate out of another, empty instance of X.509 certificate must not throw
  * gh#mono/mono#6283 - Mono is not able to notice a file change in a FileInfo object
  * gh#mono/mono#6320 - [arm] unaligned access in ves_icall_System_ValueType_Equals
  * gh#mono/mono#6339 - System.TypeLoadException is thrown when run .net standard library with Mono
  * gh#mono/mono#6343 - mono/utils/jemalloc does not exist
  * gh#mono/mono#6349 - messages during make dist: “file name is too long”
  * gh#mono/mono#6379 - Reenable System.Runtime.CompilerServices.Unsafe-xunit test on 32bit
  * gh#mono/mono#6383 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing
  * gh#mono/mono#6401 - Invalid array cast is supported
  * gh#mono/mono#6411 - System.Numerics structs are incorrect sizes
  * gh#mono/mono#6464 - Socket.Send misses data on Windows
  * gh#mono/mono#6490 - Reenable weak-fields.exe test
  * gh#mono/mono#6777 - Memory corruption in Mono 5.8.0.108
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#xamarin/maccore#628 - mscorlib/Mac/Full: LocalId (MonoTests.System.TimeZoneInfoTest+PropertiesTests.LocalId) fails
  * gh#xamarin/maccore#629 - iOS 32-bit sim: TimeZoneTest.TestCtors (D02) fails</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1534161600">- Update to version 5.14.0.177 (5.14.0 Stable)
- Remove patch: profiler-aot-parse_args-fix.patch
- Patch fix-dbg-headers.patch was updated
- Added patch: fix-ppc-64bit-portability-issue.patch:
  * Fix 64bit-portability-issue OBS error when compiling for PPC arch
- New features and changes:
  * Better generic sharing: generic sharing has been improved
  * Memory optimization for handles: reduce the amount of preallocated memory when process requires only a minimal number of handles
  * GC Handling of very large objects: fix handling of objects which are over 4GBs of memory
  * Class Libraries: significant improvements to System.Windows.Forms
  * MCS: C# 7.x support was extended
  * NuGet: the bundled version of NuGet has been updated to 4.7.0
  * mkbundle: a new --mono-api-struct-path option was introduced to allow customization of runtime functions used for the embedding
- Bugfixes:
  * gh#mono/mono#6178 - Log profiler should provide startup time in stream header from same source as event timestamps
  * gh#mono/mono#6186 - Code coverage instrumentation logic should deal with inlining the same way as enter/leave instrumentation
  * gh#mono/mono#6187 - mkbundle Linux - program doesn’t run on system unless mono-core is installed
  * gh#mono/mono#6211 - Rare shutdown crash in profiler stress tests
  * gh#mono/mono#6266 - ArrayTypeMismatchException when using array of generic ICollection or IList
  * gh#mono/mono#6357 - Keepass crashes when editing an entry notes field in a specific way
  * gh#mono/mono#6579 - Type.GetInterface fails to find implemented interface when ignoreCase: true is used
  * gh#mono/mono#6666 - Invalid cast is not checked for nullable types
  * gh#mono/mono#6752 - System.TermInfoReader cannot handle new NCurses 6 TermInfo files
  * gh#mono/mono#6767 - Add missing APIs to System.Data
  * gh#mono/mono#6788 - nuget restore fails to parse valid json from nuget.org with mono/master
  * gh#mono/mono#6801 - Self-hosted HttpListener gets empty file collection and input stream for multipart PUT or POST requests
  * gh#mono/mono#6812 - MonoProfilerCoverageData::column is equal 0
  * gh#mono/mono#6848 - netstandard facade dlls have different public key tokens
  * gh#mono/mono#6940 - DNS lookup of IPv6-only hosts fails
  * gh#mono/mono#6948 - [XI]WatchOS apps fail to build with error “Undefined symbols for architecture armv7k” using XI with mono-2017-12 support
  * gh#mono/mono#6998 - Runtime assert in System.Runtime.Remoting
  * gh#mono/mono#6999 - test_0_time_drift - mono/tests failure
  * gh#mono/mono#7016 - Hybrid AOT is not working for some generic methods
  * gh#mono/mono#7085 - Hybrid AOT breaks setting thread UI culture
  * gh#mono/mono#7086 - Hybrid AOT throws invalid cast exception on dictionaries indexed with enum
  * gh#mono/mono#7093 - Regression in Array interface conversions
  * gh#mono/mono#7095 - Assertion at class-accessors.c:31, condition `mono_class_is_ginst (klass)’ not met
  * gh#mono/mono#7134 - NullReferenceException while processing concurrent requests with a WCF app
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7145 - [XI] RuntimeFeatureTest.NoNewFeaturesAdded failure in mscorlib tests
  * gh#mono/mono#7184 - MSBuild always recompiles project if it has a resx with a windows path.
  * gh#mono/mono#7199 - finalizer-abort.exe
  * gh#mono/mono#7200 - Problem building on Arch linux
  * gh#mono/mono#7240 - dim-sharedgenerics.exe fails with LLVM
  * gh#mono/mono#7262 - .config with dllmap not working with app domains with shadow copying enabled
  * gh#mono/mono#7289 - Creating EnumMirror fails in a multi-domain context.
  * gh#mono/mono#7328 - suggest recursive self-calls do not create trampoline
  * gh#mono/mono#7338 - Finalizer crashes because of FileSystemWatcher Dispose exception in FileSystemWatcher_mobile.cs
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7364 - watchOS/LLVM crashes at launch on device
  * gh#mono/mono#7378 - WeakAttribute causes all fields within a class to become weak
  * gh#mono/mono#7389 - System.CodeDom.Compiler.CodeDomConfigurationHandler throws on initialization
  * gh#mono/mono#7408 - No longer builds with CentOS 6 (GCC 4.4.7)
  * gh#mono/mono#7432 - gcsuppressfinalize.exe CoreCLR test started failing after upgrade to Debian 9
  * gh#mono/mono#7449 - PInvoke to function that takes a struct with an array of double gets incorrect results on Android
  * gh#mono/mono#7460 - w32handles require much memory when the minimum required is much lower
  * gh#mono/mono#7535 - [llvm/bitcode] Crash in mono_class_has_failure (class.c:10037)
  * gh#mono/mono#7536 - Missing Facades from net_4_x that are in 4.7.1.
  * gh#mono/mono#7537 - new object [int.MaxValue] crashes runtime instead of OOM
  * gh#mono/mono#7565 - Generic symbol names exported from libmono
  * gh#mono/mono#7568 - Intermittent failures on bug-80307.exe and other tests using FileSystemWatcher
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7613 - mprof-report can’t read v13 file that Mono.Profiler.Log can
  * gh#mono/mono#7620 - DrawToBitmap in Control.cs does not work
  * gh#mono/mono#7624 - Strict loader still loads incorrect assembly
  * gh#mono/mono#7637 - iOS release build: “Could not AOT the assembly” -&gt; “p - buf &lt; buf_size not met”
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7657 - Method is inaccessible from method in nested classes with inheritance.
  * gh#mono/mono#7661 - Suppress the degraded allocation warning for the WebAssembly target
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7696 - LINQ bug (ConcatNIterator.ToArray()?)
  * gh#mono/mono#7729 - [mcs] fails to compile code with Tuple
  * gh#mono/mono#7786 - “mono/metadata/threads.c:3016, condition `internal’ not met” under certain conditions with the soft debugger attached
  * gh#mono/mono#7792 - Failure to AOT compile due to condition `load_opcode != OP_LOADV_MEMBASE’ not met
  * gh#mono/mono#7805 - F# build is broken due to new String.StartsWith overload
  * gh#mono/mono#7822 - Failing to serialize ConcurrentDictionary with BinaryFormatter
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7860 - illinkanalyzer isn’t whitelisted in the macOS package
  * gh#mono/mono#7864 - [wasm] Don’t fail when TaskCreationOptions.LongRunning is used
  * gh#mono/mono#7903 - Mono VS solution has wrong all projects in all profiles used
  * gh#mono/mono#7920 - build broken with –enable-minimal=soft_debug
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * bxc#10087 - Process exit can be blocked if the AppDomain.ProcessExit event hangs
  * bxc#11771 - IsolatedStorageFile.GetFileNames() throws exception w/ nested dirs
  * bxc#12850 - FtpWebRequest does not handle remote paths properly
  * bxc#18941 - Calling Marshal.SizeOf() with an Empty struct using Sequential or Explicit returns 0
  * bxc#19038 - Quitting XS caused MainStoryboard.Storyboard to convert to IB file
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#25224 - stack overflow after printfn something
  * bxc#25444 - WCF method with UriTemplate annotation fails with InvalidOperationException
  * bxc#33208 - System.Reflection.Module.ResolveMember() returning inconsistent results when querying dynamic assemblies
  * bxc#46473 - Error: The object with ID N implements the IObjectReference interface for which all dependencies cannot be resolved. The likely cause is two instances of IObjectReference that have a mutual dependency on each other
  * bxc#53272 - Unhandled Exception System.Collections.Generic.KeyNotFoundException in ikdasm
  * bxc#58413 - Environment.Tickcount is changed when the date is changed in android
  * bxc#59184 - MethodInfo.Invoke fails for generic methods with too many/too large arguments
  * bxc#59400 - Wrong interface method is called (two interfaces, covariance)
  * bxc#59779 - HttpClient, when using GZIP, hangs while sending multiple requests in parallel.
  * bxc#60065 - Make exception marshaling work with system mono
  * bxc#60088 - Assertion at ../../../../external/mono/mono/mini/debugger-agent.c:4765, condition `array-&gt;len == 1’ not met
  * bxc#60843 - Type 0x15 not handled in custom attr value decoding</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1541678400">- Update to version 5.16.0.179 (5.16.0 Stable)
- Remove patch: fix-64bit-portability-issue.patch
- New features and changes:
  * LLVM: a new option llvmopts has been added to allow override the built-in set of flags passed to the LLVM optimizer
  * Response files support: a response file is a plain-text file that contains strings to be treated as arguments for mono runtime, activated with "--response=FILE" option
  * Assembly loader: the loading of mixed strong named and non-strong names assemblies has been improved to further match .NET desktop behaviour
  * Hybrid suspend: hybrid suspend is a new mechanism that Mono’s garbage collector may use to pause threads when during garbage collection
  * 32-bit floating operations: performing 32-bit floating operations using 32-bit math is now the default settings for the runtime
  * The debugger library: the runtime can be configured using --enable-minimal=soft_debug option and the debugger code will be compiled into a separate libmono-dbg.a library. The library needs to be linked into the app if needed
  * Custom modifiers enhancements: fixed a few issues in handling custom modifiers, especially around type equality with custom modifiers
  * Optimizations: various optimizations for Span&lt;T&gt;, ReadOnlySpan&lt;T&gt;, EqualityComparer&lt;T&gt;.Equals, Enum.HasFlags
  * CoreFX convergence: fully replaced System.Xml.Linq, System.Json, System.Threading.Tasks.Dataflow, System.ServiceModel.Syndication assemblies and System.Net.Mail, System.ComponentModel, System.Text.Encoding namespaces
  * Client certificate support: added support for client certificates for authentication as well as making requests to web servers that use TLS renegotiation
  * System.MathF type: the single-precision math operations are now available in a new System.MathF class
  * Prettier exception stack-traces: prettier exception printer, especially for generated code stack traces, improvements for async exceptions
  * Mono.Options: the arbitrary command nesting is now supported
  * C# compiler: the Roslyn compiler (csc) has been updated to version 2.8.2 which includes C# 7.3 support
  * sn: the sn tool, the utility for signing assemblies, has been updated to support signing PE32+ assemblies
  * mkbundle: mkbundle has been extended to allow further customization of Mono runtime initialization sequence
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#6173 - Periodic heapshot mode calculates time difference incorrectly
  * gh#mono/mono#6466 - System.Diagnostics.ProcessTest.Start1_FileName_NotFound failing on newer Ubuntu
  * gh#mono/mono#6647 - Jagged arrays cannot be cast to IList&lt;&gt;
  * gh#mono/mono#6834 - Frequent timing out of the ‘monitor-abort’ tests on CI
  * gh#mono/mono#6936 - Mono runtime doesn’t check modreqs for overriding methods
  * gh#mono/mono#7058 - [interp] pinvoke.exe is flaky
  * gh#mono/mono#7137 - Step in crashes debugger
  * gh#mono/mono#7247 - CoreFX System.Text namespace
  * gh#mono/mono#7260 - StackTrace.GetFrames() does not return frames from captured traces
  * gh#mono/mono#7305 - Stack overflow when hosting a WCF service when contract interface inherits other interfaces
  * gh#mono/mono#7356 - Memory leak in HttpWebRequest / HttpWebResponse
  * gh#mono/mono#7402 - [interp] fix System.Threading.ThreadTest.Test_Interrupt
  * gh#mono/mono#7525 - Profiler exception clause reporting is broken
  * gh#mono/mono#7610 - Add System.Memory facade
  * gh#mono/mono#7649 - Exception stacktrace is null when task delegate is created from local function
  * gh#mono/mono#7655 - Memory leak in file operations in mono 5.10
  * gh#mono/mono#7683 - Assertion at /Users/builder/data/lanes/5808/1c6f300e/source/xamarin-macios/external/mono/mono/profiler/log.c:546, condition `mono_lls_insert (&amp;log_profiler.profiler_thread_list, hp, &amp;thread-&gt;node) &amp;&amp; “Why can’t we insert the thread in the LLS?”’ not met
  * gh#mono/mono#7685 - Assert ainfo-&gt;cinfo-&gt;stack_usage % MONO_ARCH_FRAME_ALIGNMENT == 0
  * gh#mono/mono#7716 - mono’s mscorlib.xml descriptor file seems incomplete for Xamarin.Mac
  * gh#mono/mono#7731 - MKBundle fails on Windows due to a folder check/missing folder
  * gh#mono/mono#7785 - Dead link (404) in a runtime execution engine exception
  * gh#mono/mono#7828 - Invalid instruction generated by regex runtime when using dapper
  * gh#mono/mono#7944 - CreateDelegate produces delegate wrapping incorrect method
  * gh#mono/mono#7947 - Missing forwarders from System.Runtime.Extensions
  * gh#mono/mono#8036 - Update API diff to ignore more attributes
  * gh#mono/mono#8074 - signing problems in preset fullaot build
  * gh#mono/mono#8089 - Add System.Drawing.Common facade for Xamarin profiles
  * gh#mono/mono#8112 - Wrong maximal instruction length of instruction tailcall_membase on ARM64
  * gh#mono/mono#8122 - CoreFX System.Xml.Linq
  * gh#mono/mono#8143 - CEE_STELEM for single token fails in wasm interp mode
  * gh#mono/mono#8149 - Assembly.LoadFile and Assembly.LoadFrom have same behavior
  * gh#mono/mono#8175 - Changing eglib doesn’t rebuild mono
  * gh#mono/mono#8177 - [wasm] master broken due to WASM-ERR: missing function: mono_debugger_agent_init
  * gh#mono/mono#8218 - SN fails when signing x64 assemblies
  * gh#mono/mono#8250 - assertion failure fullaot llvm System.Drawing.dll
  * gh#mono/mono#8267 - TimeZoneInfo.Local Id and DisplayName are always: Local
  * gh#mono/mono#8282 - [android] respect maximum length of a message when using __android_log_write ()
  * gh#mono/mono#8310 - FSharp build is broken due to new Path.GetFileName() overload
  * gh#mono/mono#8311 - bug-82022.exe fails in LLVM JIT
  * gh#mono/mono#8321 - Build break/test failures on FullAOT+LLVM configuration
  * gh#mono/mono#8329 - mono –interpreter got * Assertion at ..\mono\mini\interp\interp.c:3557, condition `csig-&gt;call_convention == MONO_CALL_DEFAULT’ not met
  * gh#mono/mono#8340 - Issue with black text on console, possibly ncurses
  * gh#mono/mono#8356 - Hybrid suspend: backtrace in GC Unsafe mode considered harmful (on Linux)
  * gh#mono/mono#8372 - unload-appdomain-on-shutdown.exe flaky test
  * gh#mono/mono#8407 - TypeDescriptorTest.TestCreateDesigner and TestGetAttributes broken on FullAOT
  * gh#mono/mono#8409 - FullAOT test failures/crashes on arm64,armel or armhf
  * gh#mono/mono#8417 - Redirecting process output when Console.SetOut set gives strange output
  * gh#mono/mono#8422 - Ambiguous call Encoding.GetByteCount(char[], int, int) and Encoding.GetByteCount(string, int, int)
  * gh#mono/mono#8430 - Fails to compile without AOT (enable-minimal=profiler,debug,aot)
  * gh#mono/mono#8447 - ilasm can’t assemble vbbyrefstr parameters
  * gh#mono/mono#8469 - API/Project Files diff renderer stops at XML end comment –&gt;
  * gh#mono/mono#8473 - ThreadPoolTests.PerformanceCounter_WorkItems fails occasionally
  * gh#mono/mono#8488 - Doesn’t compile with Clang on ARM64
  * gh#mono/mono#8572 - Build fails on Redhat 6.8 with GCC 4.4.7
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8587 - configure.ac G_HAVE_ISO_VARARGS problems
  * gh#mono/mono#8597 - System.Reflection.Emit: ParameterBuilder.SetConstant(value) throws ArgumentException for nullable value typed parameters
  * gh#mono/mono#8623 - Complete the System.Memory types import
  * gh#mono/mono#8698 - csharp REPL can’t load pkg-config references interactively
  * gh#mono/mono#8701 - AOT failure if ref readonly with generics is used
  * gh#mono/mono#8712 - FileSystemWatcher only works for one instance
  * gh#mono/mono#8721 - System.Threading.Tasks.TaskFactoryTests.FromAsync_BeginCallback failing under XM with 2018-04
  * gh#mono/mono#8726 - Loading denied assemblies via Assembly.LoadFrom can cause issues, eg. for VSMac
  * gh#mono/mono#8759 - Build of Master fails with GCC 4.4.7
  * gh#mono/mono#8787 - ThreadPrincipalTests.PrincipalFlowsToAsyncTask failure on device
  * gh#mono/mono#8820 - [loader] Mono is too strict when checking for already loaded assemblies.
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#8866 - jit profiler option crashes iOS apps
  * gh#mono/mono#8897 - “Microsoft.Managed.Core.targets” is missing from roslyn-binaries
  * gh#mono/mono#8915 - Using BinaryFormatter to deserialize an array in a struct in a parent class fails with unfriendly exception [reproducible test case i promise]
  * gh#mono/mono#8979 - configure script incorrectly assumes functions are available with some conditions
  * gh#mono/mono#9002 - ServiceControllerTest.cs is designed to fail.
  * gh#mono/mono#9023 - Two ValueType properties initialization inline fails in mono-wasm
  * gh#mono/mono#9031 - HttpWebRequest.EndGetRequestStream throws wrong exception on abort
  * gh#mono/mono#9033 - DynamicMethod creation fails with “method arguments are incompatible”
  * gh#mono/mono#9179 - CI build breakage for 2018-04, msbuild
  * gh#mono/mono#9234 - [System]: Renegotiation in AppleTls requires OS X 10.12+
  * gh#mono/mono#9277 - Cannot get the exit code from a non-child process on Unix (on Windows)
  * gh#mono/mono#9318 - watchOS: “fastcc” not supported with Xcode 10’s clang
  * gh#mono/mono#9753 - [loader] LoadFile from application base should load in default context
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9869 - iOS: mini test failure in release/llvm mode (JitTests.Math: Expected: 0 But was: 1)
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9996 - The type initializer for ‘System.Data.Entity.Core.Objects.ELinq.ExpressionConverter’ threw an exception. (regression in Mono 5.14)
  * bxc#19436 - [eglib] GMarkup XML parser can’t handle hyphens underscores and periods in element names.
  * bxc#23668 - System.Net.Http.Formatting should not contain Newtonsoft.Json
  * bxc#26983 - Console properties might deadlock for background properties
  * bxc#46917 - Incorrect validation checks in message formater
  * bxc#60065 - Make exception marshaling work with system mono</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1550145600">- Update to version 5.18.0.240, release skipped
- New features and changes:
  * AOT: Few hard to track race conditions in trampolines unboxing for AOT backend targetting amd64 were fixed
  * Interpreter: Added low-level optimizations, support Xamarin native types (nint/nuint)
  * Custom Marshalers: The logic handling custom marshalers, types implementing IICustomMarshaler has been mostly rewritten
  * Optimizations: The intrinsics built on top of SSE41 for Math.Round/Math.Floor/Math.Ceiling were added
  * Windows: Mono Windows cross-compiler is using the same LLVM release branch as Linux resolving issues in scenarios where llvm-config.exe can’t be run (none WSL/CygWin build target)
  * CoreFX convergence: more CoreFX code was imported in particular in System.Reflection namespace, Many common types in mscorlib System namespace are now fully CoreFX based including System.Math
  * Mono.Options: A new CommandSet.GetCompletions() method was introduced
  * System.Runtime.InteropServices: It’s now possible to use RuntimeInformation API to detect ARM and ARM64 platforms
  * MSBuild: Reference assemblies for .NET 4.7.2 are included to allow targeting .NET Framework 4.7.2 using MSBuild on Mono
- Bugfixes:
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="fwdsbs.to.11df@xoxy.net" date="1555070400">- Update to version 5.20.1 Stable (5.20.1.19)
- Patch fix-dbg-headers.patch was updated
- Patch ucontext.patch was removed
- Added libtest.patch from upstream: fix build failure
- New features and changes:
  * System.Data: the support for SSPI (Security Support Provider Interface) in System.Data assembly has been added. Additional package (krb5) needs to be installed in order to use this feature.
- Bugfixes:
  * gh#mono/mono#10000 - Type.IsSubclassOf Performance Regression
  * gh#mono/mono#10031 - unhandled-exception-2.exe crashes crash reporting
  * gh#mono/mono#10035 - BinaryReaderTest.ReadBytesException and BinaryReaderTest.ReadCharsException fail on FullAOT+LLVM after hybrid suspend change
  * gh#mono/mono#10070 - recent string loading changes break big endian with mojibake
  * gh#mono/mono#10143 - Process.GetProcessesByName Memory Leak, Not Disposing Filtered Process Objects
  * gh#mono/mono#10144 - Generic with “unmanaged” constraint crashes runtime
  * gh#mono/mono#10227 - ProductHeaderValue parser throws exception for empty values
  * gh#mono/mono#10243 - opt and llc missing from mono 2018-08 pkg
  * gh#mono/mono#10244 - [wasm] Make test.js use generated driver and bindings.
  * gh#mono/mono#10303 - Latest mono on macOS broke Xamarin Studio 5 compatibility: Marshal.SizeOf reports type 0x01 not handled
  * gh#mono/mono#10309 - Mono issuing SIGSEGV running C# Semantic Tests
  * gh#mono/mono#10412 - Native crash when debugging with exception watchpoint
  * gh#mono/mono#10441 - FullAOT LLVM Linux x64 one flaky failure.
  * gh#mono/mono#10446 - [ WASM ]Build fail host error
  * gh#mono/mono#10448 - [iOS] CalendarTest.Hijri and CalendarTest.UmAlQura fail
  * gh#mono/mono#10467 - mono_thread_info_exit ignores exit_code and just passes 0 on.
  * gh#mono/mono#10483 - iOS cannot save Entity models with Nullable Guid (Guid?) property types (among others) using EF Core 2.1.2.
  * gh#mono/mono#10488 - HttpWebRequest throws an uncatchable task exception when processing requests simultaneously with timeout specified
  * gh#mono/mono#10506 - Update CI build scripts to not hardcode -j4
  * gh#mono/mono#10549 - Wrong characters in decimal number representation on s390x
  * gh#mono/mono#10598 - Many scary “Your mono runtime and class libraries are out of sync” mono warnings when building for device
  * gh#mono/mono#10603 - [wasm] Stop using mmap for loading assemblies
  * gh#mono/mono#10620 - [wasm] Rename sdks WebAssembly framework libraries
  * gh#mono/mono#10682 - [wasm] Build fails - ninja can not be found.
  * gh#mono/mono#10735 - mono64[80780:1186894] error: * Assertion: should not be reached at debugger-agent.c:6619
  * gh#mono/mono#10802 - mono_jit_init on macOS 10.14 has graphics corruption due to mprotect invocation
  * gh#mono/mono#10834 - Error loading generic override of in parameter
  * gh#mono/mono#10863 - Possible GC hang while building msbuild with mono/2018-08 and mono/master
  * gh#mono/mono#11123 - Type.IsSubclassOf throws TypeLoadException
  * gh#mono/mono#11138 - Hybrid suspend: mono_add_internal_call is broken
  * gh#mono/mono#11146 - Unhandled exception at the end of MonoDevelop.UnitTesting.Tests test run
  * gh#mono/mono#11202 - Mac installer does not always clear out old files
  * gh#mono/mono#11214 - SDK ‘Microsoft.NET.Sdk.Razor’ not found
  * gh#mono/mono#11303 - ParameterInfo.[Raw]DefaultValue returns Missing.Value for non-null default values of DateTime? and decimal? parameters
  * gh#mono/mono#11317 - Unexpected behaviour of DateTime.ToString with Korean language on iOS/Android
  * gh#mono/mono#11378 - [WASM AOT] Method returning a ValueType is not returning its value as a value
  * gh#mono/mono#11441 - HttpClient requests not cancelled in Dispose()
  * gh#mono/mono#11478 - [XA] [2018-10] Failure in PropertyInfoTests.GetValue_Invalid
  * gh#mono/mono#11479 - Loading assembly generated using tlbimp.exe give error in mono runtime
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11613 - AOT crash: error: * Assertion: should not be reached at ../../../../../mono/mini/mini-arm64-gsharedvt.c:119
  * gh#mono/mono#11874 - watchOS: mini test failure in release mode: JitTests.Aot : System.Reflection.TargetInvocationException
  * gh#mono/mono#11956 - os-event-unix.c:82 assert(event) failure
  * gh#mono/mono#11965 - [iOS/32bit/device] mscorlib test failures: DoubleFormatterTest.TestFormatStringsN# and DoubleTest.LongLongValueRoundtrip
  * gh#mono/mono#12069 - MethodInfo.ReturnParameter.IsDefined(type) throws IndexOutOfRangeException
  * gh#mono/mono#12130 - [watchOS] MT3001: Could not AOT the assembly mscorlib.dll
  * gh#mono/mono#12235 - Crash while profiling roslyn compiler server
  * gh#mono/mono#12344 - FastCopy may silently fail to do anything
  * gh#mono/mono#12362 - Problem with DefaultValueAttribute and Color values
  * gh#mono/mono#12421 - Task calls SynchronizationContext.Post on cancelling
  * gh#mono/mono#12461 - ReflectionModelServices.IsExportFactoryImportDefinition should not throw
  * gh#mono/mono#12724 - xtro-sharpie.exe crashes with “Cannot transition thread 0x10c3ef5c0 from STATE_BLOCKING with DO_BLOCKING”
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#6352 - Bug in TextRenderer.DrawText on Linux
  * gh#mono/mono#7087 - Calling TcpListener.Create(int port) on multiple threads can fail
  * gh#mono/mono#8225 - Mono mkbundle output executable throws: “Error mapping file: No error”
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8575 - GetCustomAttributes on a type from an assembly in the LoadFile context fails
  * gh#mono/mono#8689 - Memory leak in HttpWebRequest / HttpWebResponse when using a WebProxy
  * gh#mono/mono#8766 - Starting process with empty ProcessStartInfo.Environment incorrectly inherits all variables
  * gh#mono/mono#8848 - Error when debugging
  * gh#mono/mono#9028 - Mono to SQL Server using integrated security no longer works on iOS
  * gh#mono/mono#9089 - WaitHandle.WaitAny returns invalid result
  * gh#mono/mono#9418 - SslStream.AuthenticateAsClient throws wrong exception types
  * gh#mono/mono#9532 - Mono.Unix.Native.Syscall.sys_strerror_r SEGFAULT on musl libc
  * gh#mono/mono#9566 - flaky runtime.finalizer-exception.exe (Assertion at unwind.c:640, condition `cfa_reg != -1’ not met)
  * gh#mono/mono#9581 - Update macOS minimal version
  * gh#mono/mono#9839 - Behaviour difference between Mono and CoreCLR
  * gh#mono/mono#9870 - iOS: 32-bit device unit test failure: [FAIL] FSharpTest.SprintfTest : Expected: True
  * gh#mono/mono#9935 - tests/src/baseservices/threading/readerwriterlockslim/upgrader.cs CoreCLR acceptance-test fails
  * gh#mono/mono#9941 - WASM: Use BrowserHttpMessageHandler when available
  * gh#mono/mono#9943 - System.Reflection.Assembly.LoadFile should throw ArgumentException for relative path name
  * gh#mono/mono#9947 - AOT images compiled with safepoints should be usable with MONO_THREADS_SUSPEND=preemptive
  * gh#mono/mono#9951 - cross build regressed wrt System.Native and “shm_open that works well enough with mmap”
  * gh#mono/mono#9973 - Update framework facades list used by loader
  * bxc#43447 - SynchronizedCollection.Add throws an ArgumentOutOfRangeException</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133266).</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1574251200">- update to new version 6.4.0
- removed libtest.patch because it was fixed upstream
- New features and changes:
  * Highlights
    C# compiler support for C# 8 language version
    .NET Standard 2.1 support
    Updated libgdiplus to 6.0.2
    Notarized macOS installer package
  * Hardened Runtime and Notarization support on macOS
    The Mono binary installed by the .pkg for macOS is now using the Hardened Runtime capabilities and the package was notarized to comply with Apple’s new restrictions: https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution.
    This allows the package to work on the upcoming macOS 10.15 Catalina without showing warning dialogs.
  * Interpreter improvements
    The Mono interpreter was updated to support the Windows operating system.
    We also completed a lot of groundwork for upcoming future optimizations in the interpreter, like constant folding.
  * Bitness independent AOT cross compiler
    The Ahead-Of-Time (AOT) cross compiler was updated to no longer require being executed with the same bitness that it should generate code for. This means a 64bit Mono can now emit AOT code for 32bit targets.
    This work was mainly done to support executing the AOT cross compiler on macOS 10.15 Catalina (which is 64bit only) as we still need to generate code for 32bit targets like older iPhone and Apple Watch devices.
  * WebAssembly
    We continue to work on making our WebAssembly support better. Various sets of issues with the debugger have been resolved in this release and general performance and feature work is happening as well.
  * LLVM improvements
    We now leave it up to the LLVM framework to insert safepoints. Later optimizations can understand safepoints then which leads to better generated code. See https://github.com/mono/mono/pull/11789
    The LLVM backend is also supported on the Windows operating system now.
  * PPC JIT optimizations
    The PowerPC JIT received a bunch of optimization from community contributor Calvin Buckley (@NattyNarwhal).
  * Experimental build support for Fuchsia
    A very minimal and experimental support for building Mono targeting the Fuchsia OS landed in the build system.
  * .NET Standard 2.1 support
    We updated our class libraries to support the latest additions to .NET Standard. You can now run a library compiled against the .NET Standard 2.1 specification on Mono.
  * CoreFX integration
    We continued to replace some of our classes with the implementation from CoreFX to improve performance and compatibility with .NET.
  * libgdiplus update to 6.0.2
    The libgdiplus native library is used for implementing System.Drawing on Unix platforms. This release contains many important improvements from our community members.
  * System.Windows.Forms
    More fixes and layout improvements for different controls made by external contributors have landed in this release .
  * C# 8 language version support in csc and msbuild
    The C# compiler and msbuild tooling were updated to versions that support the final C# 8 language specification.
    The Default Interface Methods (DIM) feature also received a few runtime enhancements.
  * NuGet
    Bundled NuGet version has been upgraded to 5.2 RTM.
- Resolved Issues
  * gh#mono/mono#7377 - [Mono.Debugger.Soft] Connections are not properly closed
  * gh#mono/mono#7452 - Download link for macOS is osbsolete (5.8 instead of 5.10)
  * gh#mono/mono#7845 - Don’t install monograph
  * gh#mono/mono#8360 - [System.Net.Sockets] flakey failures of SocketTest.TestSelect1 on Darwin systems
  * gh#mono/mono#8486 - struct with 3 bytes not marshaled correctly with LLVM on watchOS
  * gh#mono/mono#8747 - FileSystemWatcher calls event after it is Disposed
  * gh#mono/mono#9267 - Release tarballs should be compressed with xz
  * gh#mono/mono#9621 - 64 bit cross compilers targeting 32 bit platforms
  * gh#mono/mono#9664 - DateTime.Now or Timezone information do not transition out of DST for all time zones
  * gh#mono/mono#10101 - ref local of jagged array leads to InvalidProgramException
  * gh#mono/mono#10277 - [Reflection] Event accessors don’t inherit ReflectedType
  * gh#mono/mono#10645 - WebException is thrown when reading from WebException.Response.GetResponse() stream
  * gh#mono/mono#11431 - Add Brotli compression to existing System.IO.Compression assembly
  * gh#mono/mono#11489 - IronPython 2.7.9 strange issue on mono 5.16
  * gh#mono/mono#11643 - mkbudle problem - Illegal byte sequence
  * gh#mono/mono#12157 - new DriveInfo(Path.GetTempPath()) crashes on macOS
  * gh#mono/mono#12182 - LLVM AOT caches require SSE4.1-capable CPU
  * gh#mono/mono#12747 - System.Reflection.Emit.ParameterBuilder.SetCustomAttribute() throws undocumented ArgumentOutOfRangeException
  * gh#mono/mono#12831 - [iOS] Generic sharing with long float arguments list
  * gh#mono/mono#12839 - [Windows] block_guard_restore_aligment_on_exit.exe frequently times out on CI
  * gh#mono/mono#12843 - Mono Android debugger crashes using HttpClient wrapped in Async Method
  * gh#mono/mono#12871 - wasm var co = new System.Net.CookieContainer(); error System.DllNotFoundException: libc
  * gh#mono/mono#12881 - MonoDevelop SDB regressions
  * gh#mono/mono#12945 - corlib-xunit tests taking 10x longer in the coop configuration
  * gh#mono/mono#12964 - [debugger][wasm] Assertion at mono/metadata/loader.c:2500, condition ‘' not met
  * gh#mono/mono#12981 - [WASM] Transform.c:2856, condition `' not met
  * gh#mono/mono#12988 - [WASM] LLVM failed for ‘ObservableCollectionExtensions.InternalUpdate’: incoming phi sreg1
  * gh#mono/mono#12998 - [WASM] llvmonly-runtime.c:804, condition `' not met
  * gh#mono/mono#13028 - FSharpType.IsUnion broken inside of F# Interactive due to missing System.Reflection.Emit.AssemblyBuilder.ReflectionOnly implementation
  * gh#mono/mono#13030 - Directory.GetLogicalDrives () missing SystemNative_GetAllMountPoints pal function
  * gh#mono/mono#13056 - AV inside mono_local_cprop+0x23f
  * gh#mono/mono#13150 - [WinForms] Related Forms closing
  * gh#mono/mono#13163 - Task: Use async DNS resolution in Socket and web stack code.
  * gh#mono/mono#13195 - [wasm][ci] Intermittent failures with ChakraCore Tests
  * gh#mono/mono#13224 - iOS SDKs test app build doesn’t work when not in sdks/ios directory
  * gh#mono/mono#13231 - CGPattern causes “Attempting to JIT compile method” exception since VS 7.5
  * gh#mono/mono#13250 - Setting CustomErrorsMode for RemotingConfiguration throws NotImplementedException
  * gh#mono/mono#13261 - [sdb] StackOverflow when invoking many methods from client debugger
  * gh#mono/mono#13282 - [SWF] Method OnClosed should pass FormClosedEventArgs type, instead of EventArgs
  * gh#mono/mono#13284 - Checked ulong relational operation throws wrong OverflowException on armeabi-v7a
  * gh#mono/mono#13297 - [WASM] decompose.c:1471, condition `cfg-&gt;cbb == first_bb’ not met
  * gh#mono/mono#13311 - [sdb] Failure to suspend
  * gh#mono/mono#13319 - Crash executing static methods on interfaces
  * gh#mono/mono#13350 - MemberInfo.ReflectedType returns wrong reflected type for an event method
  * gh#mono/mono#13374 - Crash executing default implemented property in interface
  * gh#mono/mono#13412 - Bump netstandard.dll assembly version to 2.1
  * gh#mono/mono#13445 - Fork regression in Mojave due to MAP_JIT
  * gh#mono/mono#13452 - [Linux] Mono (5.18.0.268) crashes in String:IndexOf(char value, int startIndex)
  * gh#mono/mono#13454 - watchOS apps crash on launch if built with LLVM
  * gh#mono/mono#13455 - AOT crashes with “MVAR 0 (Ts) cannot be expanded with type 0x1e” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13460 - AOT crashes with “Instruction does not dominate all uses” when compiling monotouch_System.Core_xunit-test.dll
  * gh#mono/mono#13463 - [WASM] Mixed Mode: function signature mismatch
  * gh#mono/mono#13466 - Crash at runtime likely related to protected accessibility of a method declared in an interface.
  * gh#mono/mono#13467 - Unexpected System.MethodAccessException is thrown for a protected method declared in an interface
  * gh#mono/mono#13478 - Undefined symbol ___sync_lock_test_and_set_4 on armv7 in xamarin-macios 2019-02
  * gh#mono/mono#13479 - System.Runtime.CompilerServices.UnsafeTests attempting to JIT compile on iOS devices
  * gh#mono/mono#13508 - ILAsm: adds ‘virtual’ attribute to sealed default interface methods
  * gh#mono/mono#13522 - AOT issue on WatchOS: “* Assertion at mini-llvm.c:9381, condition `fields [2 + i]’ not met “
  * gh#mono/mono#13526 - The repl (monotouch_tv_runtime) assemblies don’t work for tvOS
  * gh#mono/mono#13597 - Runtime Error when using span on LeetCode
  * gh#mono/mono#13607 - Assertion in xamarin-macios link sdk test: “mini-generic-sharing.c:568, condition `is_ok (error)’ not met, function:inflate_info, Could not inflate generic type, due to MVAR 0 (T_ULONG) cannot be expanded with type 0x1e”
  * gh#mono/mono#13610 - Returning tuple broken when enabling fullAOT+LLVM
  * gh#mono/mono#13639 - mono-cil-strip crashes when called against the monotouch_Microsoft.CSharp_xunit-test.dll
  * gh#mono/mono#13654 - Interpreter Crash When Doing Fancy Reflection
  * gh#mono/mono#13672 - [2019-02] Xamarin.Android runtime tests crash on free
  * gh#mono/mono#13714 - Exception during static constructor loading is not cleaned up
  * gh#mono/mono#13775 - New Mono drop crashing in C# symbol tests
  * gh#mono/mono#13787 - [wasm] Uint8ClampedArray.From(byte[]) invalid cast
  * gh#mono/mono#13804 - [MacSDK] pkg-config is 32-bit only
  * gh#mono/mono#13834 - Mac crash reports do not give the right SizeOfImage
  * gh#mono/mono#13878 - System.Reflection.Emit.DynamicMethod:CreateDelegate (?) crashes XM apps when under hardened runtime
  * gh#mono/mono#13888 - (FullAOT) Ran out of trampolines of type 3
  * gh#mono/mono#13889 - [llvm] Bounds checks are not eliminated
  * gh#mono/mono#13923 - [DIM] [CoreCLR Test] boring not working
  * gh#mono/mono#13925 - [DIM] [CoreCLR Test] abstractcalls not working
  * gh#mono/mono#13941 - Crash During AOT of ASP.NET Core Assemblies
  * gh#mono/mono#13974 - mono: symbol lookup error: /usr/lib/libmono-llvm.so: undefined symbol: mono_class_get_generic_class
  * gh#mono/mono#14005 - Method mono_type_is_generic_parameter is not exposed in shared libraries
  * gh#mono/mono#14079 - Interpreter Crash on Reference Source System.Web.Extensions
  * gh#mono/mono#14143 - Techempower Platform Plaintext Hangs on Every Request using LLVM JIT
  * gh#mono/mono#14170 - “Fatal signal 11 (SIGSEGV), code 1 (SEGV_MAPERR)” after debugger pauses and then continues on nested exception
  * gh#mono/mono#14181 - Pango modules.cache contains jenkins builder path
  * gh#mono/mono#14195 - 5.20.1.19 configure fails if enable-cxx but no C++ compiler found
  * gh#mono/mono#14214 - HttpClient.SendAsync() with &gt; 2 GB response body.
  * gh#mono/mono#14215 - Suggestion: switch to 7z native format instead of ZIP for Mono archives
  * gh#mono/mono#14234 - SqliteMembershipProvider initialization bug (Failed to map path ‘/’).
  * gh#mono/mono#14243 - [Wasm] Assertion at mini-llvm.c:2106, condition 'clause-&gt;flags == MONO_EXCEPTION_CLAUSE_NONE || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FINALLY || clause-&gt;flags == MONO_EXCEPTION_CLAUSE_FAULT' not met
  * gh#mono/mono#14246 - Interpreter crashes when encountering build-in types
  * gh#mono/mono#14247 - Assertion on 32-bit iOS device with thumb code
  * gh#mono/mono#14255 - Copying from Mono port of Windows Forms doesn’t work in some programs on Linux
  * gh#mono/mono#14261 - LLVM Generates Wrong IndexOf Span code
  * gh#mono/mono#14290 - [ios] Non-public API usage when submitting app
  * gh#mono/mono#14543 - Decoded custom attribute values leak the encoded value receiver
  * gh#mono/mono#14551 - Result for EnumCompareTo differs from Core implementation
  * gh#mono/mono#14585 - [tests] Don’t send HTTP requests to Google
  * gh#mono/mono#14669 - mempool allocate bug?
  * gh#mono/mono#14729 - interpreter tests fail on iOS and tvOS for mscorlib tests
  * gh#mono/mono#14792 - [sdks][ios] Perform the appropriate cast of objc_msgSend and friends
  * gh#mono/mono#14793 - Mono-Native not working on MacOS Catalina
  * gh#mono/mono#14809 - Cannot box IsByRefLike type 'System.ReadOnlySpan'1' in Forms designer tests with 6.0
  * gh#mono/mono#14839 - [xamarin] TimeZoneInfo.Local always returns “Local” name
  * gh#mono/mono#14841 - opt: Unknown command line argument ‘-place-safepoints’ in XI 2019-06 integration
  * gh#mono/mono#14871 - [wasm] System.Text.Json struct serialization fails (but works on CoreCLR)
  * gh#mono/mono#14872 - System.Runtime.CompilerServices.UnsafeTests.ReadWriteDoublePointer test failure on devices in Xamarin.iOS
  * gh#mono/mono#14972 - Xamarin.iOS: System.ExecutionEngineException: Attempting to JIT compile method ‘(wrapper delegate-begin-invoke) System.IAsyncResult System.Func`2&lt;ExecutionEngineExceptionTest.AppDelegate, bool&gt;:begin_invoke_IAsyncResult__this___T_AsyncCallback_object (ExecutionEngineExceptionTest.AppDelegate,System.AsyncCallback,object)’
  * gh#mono/mono#14975 - Mono profiler crashes when running IDE leak tests for VSMac
  * gh#mono/mono#15048 - [aot] Duplicate .fnstart Directive Compiler Error
  * gh#mono/mono#15058 - [2019-06][iOS] Several tests on iOS fail on a 32b device
  * gh#mono/mono#15261 - [iOS][Tests] There are a number of System.Numeric tests that fail on iOS 32b devices
  * gh#mono/mono#15262 - [iOS][Tests] A number of linq tests fail on iOS 32b devices
  * gh#mono/mono#15263 - [iOS][Tests] A number of tests from Microsoft.CSharp fail on iOS 32b devices.
  * gh#mono/mono#15265 - [watchOS][Tests] The System_xunit-test.dll for watchOS includes tests that should be ignored
  * gh#mono/mono#15307 - [iOS][Tests] Several corelib tests crash on iOS32b devices.
  * gh#mono/mono#15328 - [MacOS][Tests] Several tests fail due to a System.IO exception
  * gh#mono/mono#15329 - [MacOS Modern][Tests] System.IO.AnonymousPipe tests are included when they are not supported.
  * gh#mono/mono#15330 - Runtime deadlock
  * gh#mono/mono#15366 - StringBuilder marshalling bug
  * gh#mono/mono#15441 - “pos undeclared” compilation error
  * gh#mono/mono#15692 - Catching IndexOutOfRange doesn’t provide message
  * gh#mono/mono#15751 - Memory leak in mono 6.0.0.313 for delegates with target that are passed to native code
  * gh#mono/mono#15825 - DeflateStream leaks native memory if not explicitly disposed
  * gh#mono/mono#15878 - Crash in mono_coop_mutex_lock while running VS for Mac
  * gh#mono/mono#15887 - [regression] File.GetLastWriteTime fails with specific (GMT+8) timezone
  * gh#mono/mono#15999 - [mini] run regression tests with fullaot+llvm
  * gh#mono/mono#16010 - typeof(object).GetMember(“”) does not return an empty array
  * gh#mono/mono#16024 - Native crash in ves_icall_System_Net_Sockets_Socket_Connect_internal
  * gh#mono/mono#16032 - IOException: Sharing violation on path …
  * gh#mono/mono#16122 - VS 16.2.0 regression: CopyToAsync from DeflateStream to GzipStream throws NotImplementedException
  * gh#mono/mono#16486 - FileSystemEventArgs.FullPath throws ArgumentNullException
  * gh#mono/mono#16712 - SIGSEGV in mono_class_setup_vtable_general</changelog>
  <changelog author="p.seiler@linuxmail.org" date="1575374400">- removed a few internal dependencies because rpms internal dependency
  search accidently added those to the package</changelog>
  <changelog author="azouhr@opensuse.org" date="1579262400">- enable btls for s390x
- remove stale symlinks to prevent from brp-25-symlink errors</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1580817600">- Update to the most current mono release, 6.8.0.96.
  for changes, please refer to the commits log on github: https://github.com/mono/mono/commits/master</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1584619200">- Add aprofutil.exe.mdb and remove aprofutil.pdb, mdoc.exe and
  monolinker.* from file list for aarch64 and ppc64/ppc64le</changelog>
  <changelog author="dmulder@suse.com" date="1587470400">- Update to the most current mono release, 6.8.0.105.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Add mono.attr and install it to %_rpmconfigdir/fileattrs: enable
  the dependency scanner for rpm packages (boo#1152775).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1590321600">- Enable roslyn on aarch64 to build additionnal tools (mdoc.exe, ...)</changelog>
  <changelog author="mgorse@suse.com" date="1590494400">- Add fix-s390x-ucontext.patch: fix the build on 15.2/s390x
  (bsc#1171934).
- Add _constraints to prevent running out of disk space.</changelog>
  <changelog author="idonmez@suse.com" date="1590580800">- Add mono-find-provides and mono-find-requires from Fedora and use
  it instead. Fixes boo#1152775</changelog>
  <changelog author="idonmez@suse.com" date="1590667200">- Fixup mono-find-requires for v1 profiles</changelog>
</package>
<package pkgid="e423b0724cc7a0610998eef8c0a185ce0611563775c757d06d3da3fbed519985" name="iniparser" arch="src">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.de" date="1180267200">- Update to version 2.17.
  + Apply some const and fix c++ warnings.
  + Merge revision 19928 from samba.org subversion.
  + Applied patches to the Makefile to build a shared library.</changelog>
  <changelog author="crrodriguez@suse.de" date="1198756800">- fix library-without-ldconfig* errors</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="anschneider@suse.de" date="1209988800">- build without rpath</changelog>
  <changelog author="meissner@suse.de" date="1219233600">- use RPM_OPT_FLAGS, libiniparser.a can be 644</changelog>
  <changelog author="anschneider@suse.de" date="1219924800">- create packages following the shlib policy
- build only the shared library</changelog>
  <changelog author="ro@suse.de" date="1227787200">- update baselibs.conf</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source
- enable parallel building</changelog>
  <changelog author="lars@samba.org" date="1335009600">- Update to version 3.1.
  + Const'ified input string arguments
- Update to version 3.0.
  + Single function to set values in a dict: iniparser_set()
  + Bug corrected for lines containing only \n
  + Enhanced documentation
  + C++ nonsense removed</changelog>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="3c9365730576f219f248aaeb1a46777f66d5a5ca2b735298f511a56542713ab9" name="iperf" arch="aarch64">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="38b2012aa802ad6b28c5937b72f0b98f5936d64d3e8f1f6329ac32b3b989a3f9" name="iperf" arch="ppc64le">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="37cc571f0f4650e59daca05d0b23203eb66cc4fedd1c3135dcd8f64b7382c222" name="iperf" arch="s390x">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="cedbd86a97d9ed6ebfd14d5e5054cd53e0f5da4373d12c8db5b4d6dd4b0fc33c" name="iperf" arch="src">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="poletti.marco@gmail.com" date="1269950400">- Initial package, version 2.0.4</changelog>
  <changelog author="reddwarf@opensuse.org" date="1282910400">- Update to 2.0.5
  * bumped default TCP send/recv buffer to 128K (this is not the
    kernel buffer that controls the window, but rather the Iperf
    internal buffer)
  * honor -i flag when for a server (-s) when using TCP
  * Exit rather than warn on connection failure
  * Reduce CPU usage
  * "neater" output for some units, eg Kbps, Mbps, Gbps
  * addresses some typos
  * prevent underflow when the amount of data to be
    transmitted (-n) is not a multiple of the buffer size (-l)
  * print report headers only once
  * use appropriate report header for UDP tests
- Cleaned with spec-cleaner</changelog>
  <changelog author="coolo@suse.com" date="1340366400">- disable _service file for factory update
- update license to be spdx.org conform</changelog>
  <changelog author="aj@ajaissle.de" date="1395748800">- iperf project moved from SourceForge to Google Code and now to GitHub.
  License changed from NCSA to BDS-3-Clause
- Update to 3.0.2
  This version, sometimes referred to as iperf3, is a redesign of an original
  version developed at NLANR/DAST. iperf3 is a new implementation from scratch,
  with the goal of a smaller, simpler code base, and a library version of the
  functionality that can be used in other programs. iperf3 also a number of
  features found in other tools such as nuttcp and netperf, but were missing
  from the original iperf. These include, for example, a zero-copy mode and
  optional JSON output.
  Note that iperf3 is NOT backwards compatible with the original iperf.
- Added iperf-3.0.2_strncat_bufferoverflow.patch:
  * Prevent buffer overflow in strncat
- Added iperf-3.0.2_disable-profiling.patch:
  * Disable profiling on x86 (option '-pg' is incompatible with invoked
    option '-fomit-frame-pointer')
- Changes in 3.0.2
  * iperf3 now builds on Linux systems that do not support
    TCP_CONGESTION.  Most notably this allows iperf3 to work on CentOS
    5.
  * An abort on MacOS 10.9 has been fixed (issue #135).
  * Added -I flag for the server to write a PID file, mostly useful for
    daemon mode (issue #120).
  * A bug that could break some TCP tests on FreeBSD has been fixed.
  * TCP snd_cwnd output is now printed by default on Linux (issue #99).
  * In JSON output, the --title string no longer has a colon and two
    spaces appended (issue #139).
  * A buffer for holding formatted numeric values is now
    properly-sized so that output is not truncated (issue #142).
  * Some memory leaks have been fixed.
  * A -d flag enables debugging output.
  * libtoolize is now invoked correctly from the bootstrap.sh script.
  * The test unit format can now be set from the API (issue #144).
  * libiperf is now built as both shared and static libraries.
- Changes in 3.0.1
  * Added the following new flags
  - D, --daemon	       run server as a daemon
  - L, --flowlabel           set IPv6 flow label (Linux only)
  - C, --linux-congestion    set congestion control algorithm (Linux only)
  - k, --blockcount #[KMG]   number of blocks (packets) to transmit
    (instead of -t or -n)
  * Bug fixes
- Changes in 3.0-RC5
  * Added the following new flags
  - F, --file name           xmit/recv the specified file
  - A, --affinity n/n,m      set CPU affinity (Linux only)
  - J, --json                output in JSON format
  - Z, --zerocopy            use a 'zero copy' method of sending data
  - O, --omit N              omit the first n seconds
  - T, --title str           prefix every output line with this string
  * more useful information in 'verbose' mode
  * Many bug fixes
- Changes in 3.0b4
  * Added support for binding to a specific interface (-B)
  * Added support for IPv6 mode (-6)
  * Setting TCP window size (-w) is now supported
  * Updates to iperf_error
  * Added new errors
  * Should generate more relavent messages
  * Stream list now managed by queue.h macros
  * Test structures are now kept intact after a test is run (for API users)
  * Improved interval timer granularity
  * Support for decimal values
  * Many bug fixes
- Changes in 3.0b3
  * Better error handling
  * All errors now handled with iperf_error()
  * All functions that can return errors return NULL or -1 on error and set i_errno appropriately
  * Iperf API intruduced
  * Support for adding new protocols
  * Added support for callback functions
  * on_connect - executes after a connection is made to the server
  * on_new_stream - executes after a new stream is created
  * on_test_start - executes right before the test begins
  * on_test_finish - executes after the test is finished
  * Added early support for verbose mode (-V)
- Changes in 3.0b2
  * UDP mode now supported
  * Support for setting bandwidth (-b)
  * Parallel UDP stream support
  * Reverse mode UDP support
  * Support for setting TCP_NODELAY (-N), disabling Nagle's Algorithm
  * Support for setting TCP MSS (-M)
  * Note: This feature is still in development. It is still very buggy.
- Changes in 3.0b1
  * TCP control socket now manages messages between client and server
  * Dynamic server (gets test parameters from client)
  * Server can now set test options dynamically without having to restart.
  * Currently supported options: -l, -t, -n, -P, -R
  * Future options: -u, -b, -w, -M, -N, -I, -T, -Z, -6
  * Results exchange
  * Client can now see server results (and vice versa)
  * Reverse mode (-R)
  * Server sends, client receives</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1395835200">- iperf 3.0.3
  * Summary structures in the JSON output are now included, even if
    there is only one stream.
  * A possible buffer overflow in iperf_error.c has been fixed
    (replaced iperf-3.0.2_strncat_bufferoverflow.patch)
  * Example programs now build correctly
- clean spec</changelog>
  <changelog author="msvec@suse.com" date="1405598400">- iperf 3.0.5
  * A timing issue which caused measurement intervals to be wrong
    with TCP tests on lossy networks has been fixed
  * It is now possible to get (most of) the server-side output at
    the client by using the --get-server-output flag
  * A number of bugs with --json output have been fixed
- rebased iperf-3.0.2_disable-profiling.patch on 3.0.5 code
  (now is iperf-3.0.5_disable-profiling.patch)</changelog>
  <changelog author="msvec@suse.com" date="1405598401">- iperf 3.0.9
  * Bug fixes</changelog>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="46ea32f36e4373146a3539b1e62eb8aff210ede950f117baffccd0c0be1a9976" name="iperf" arch="x86_64">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="12e9a4bd7781a81063e27082fe6fcbeedf0c351a3a85bd9d2475c9d8aa78bcca" name="iperf-devel" arch="aarch64">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="3fba7401a628f33af0b58f645a86022c87884ca48a0f6f1363170440b37e3895" name="iperf-devel" arch="ppc64le">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="711f18236faa77554f21d3895904b046ef0f74f4a7fbf04b6d4b73f3634a03a9" name="iperf-devel" arch="s390x">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="5f965ce33be4c543c4b9186d19a76bd5836c60b541fe7b73c9f65f4c5583298a" name="iperf-devel" arch="x86_64">
  <version epoch="0" ver="3.5" rel="150000.3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1419595200">- Apply profiling patch whenever %optflags includes -fomit-frame-pointer</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1420718400">- iperf 3.0.10, user-visible changes:
  * UDP tests now honor the -w option for setting the socket buffer
    sizes (issue #219).</changelog>
  <changelog author="aj@ajaissle.de" date="1428235200">- iperf 3.0.11
  * This maintenance release adds a -1 flag to make the iperf3
    execute a single test and exit, needed for an upcoming bwctl
    release. A few other bugs are also fixed.</changelog>
  <changelog author="p.drouand@gmail.com" date="1448884800">- Update to version 3.1
  * SCTP support has been added (with the --sctp flag), on Linux,
    FreeBSD, and Solaris (issue #131).
  * Setting CPU affinity now works on FreeBSD.
  * Selection of TCP congestion now works on FreeBSD, and is now
    called --congestion (the old --linux-congestion option works
    but is now deprecated).
  * A new -I option for the server causes it to write a PID file,
    mostly useful for daemon mode (issue #120).
  * A --logfile argument can now force all output to go to a file,
    rather than to a file.  This is especially useful when running an
    iperf3 server in daemon mode (issue #119).
  * Various compatibility fixes for Android (issue #184, issue #185),
    iOS (issue #288), NetBSD (issue #248), Solaris (issue #175, issue
    [#178], issue #180, issue #211), vxWorks (issue #268).
  * A --udp-counters-64bit flag has been added to support very
    long-running UDP tests, which could cause a counter to overflow
    (issue #191).
  * A --cport option to specify the client-side port has been added
    (issue #207, issue #209, issue #239).
  * Some calculation errors with the -O feature have been fixed (issue
    [#236]).
  * A potential crash in the iperf3 server has been fixed (issue #257,
    issue #258).
  * Many miscellaneous bug fixes.
  * Consumers of libiperf can now get the JSON output for a
    just-completed test (issue #147).
  * Detection of various optional features has been improved to check
    for the presence or absence of platform functionality, not the name
    of platforms.
  * Out-of-tree builds now work (issue #265).
- Do not provide static library
- Update iperf-3.0.5_disable-profiling.patch &gt; iperf-disable-profiling.patch</changelog>
  <changelog author="msvec@suse.com" date="1450094400">- update to version 3.1.1
  * Minor bugfixes</changelog>
  <changelog author="plinnell@opensuse.org" date="1454932800">- Fix url so OBS is happy.</changelog>
  <changelog author="msvec@suse.com" date="1454932801">- update to version 3.1.2
  * Bug fixes</changelog>
  <changelog author="aj@ajaissle.de" date="1470916800">- update to version 3.1.3
  * fixes [boo#984453] [CVE-2016-4303] JSON parsing vulnerability
  * also includes support for fair-queueing, per-socket based
    pacing of tests on platforms that support it (currently recent
    Linux distributions), as well as several other fixes.</changelog>
  <changelog author="msvec@suse.com" date="1506081600">- update to 3.2
  * Authentication mechanism added
  * New --dscp option allows specifying the DSCP value
  * Details: https://github.com/esnet/iperf/blob/master/RELEASE_NOTES
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1510056000">- update to 3.3
  * Bug fixes</changelog>
  <changelog author="msvec@suse.com" date="1520856000">- update to 3.5
  * Bug fixes mostly</changelog>
  <changelog author="dmueller@suse.com" date="1689854400">- add CVE-2023-38403.patch (bsc#1213430, CVE-2023-38403):
  * integer overflow leading to heap buffer overflow</changelog>
</package>
<package pkgid="4da213cf2a2507d156eca991a683e90d97affa1edae307f6f50e01a0c84394af" name="jansi" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="3dc93ce514dc8399313f673204d18bd225ee5ab6ce2633b7703c01e24506ad2c" name="jansi" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="d429758b32733e1bed311a54b2264e7ea536b36cbe69818f6f13a2a3a7929dd3" name="jansi" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="72a6486d0b1aff725ccf8d196ade692bdb3760c6384479bec582540b8ecf9ecf" name="jansi" arch="src">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="fbf3f6a064fbd9f95458af1b6bdf247da1535afa72c3276656015c80090f42de" name="jansi" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="be08e564116ca684a22c0d70bf05d8ae35fd6e8dcc2f44aa86024bd570c15934" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="ef488041c8af7d23bc7e58f9428131754fc9ae81c38419deff498d2aaf18898f" name="java-17-openjdk" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="24cefe548f67c673ade00e63122fa1a544b0e9aed312847d67f58e7f058519b2" name="java-17-openjdk" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="092379c5b21da3ef535a6bf4302aeba34244aad25cdfceca0d5c35bc4b221ffc" name="java-17-openjdk" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="c884bb783339bc2b8b8683fb2344b5deb198d3cab9addb5ea6ce082aacb755d6" name="java-17-openjdk" arch="src">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="a8550c313c87edb0b112ce76b36210fa14b24ac2b0012ef17cb107bb6df4300d" name="java-17-openjdk" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="5084a2b07a73fa65351fd2841950becf875959acc167e8d65d55b3922ff22266" name="java-17-openjdk" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="4d32a47a97d5b050dd8c54f0f8115d5ced7facd1ead9b0c3ccae26f3beb19e33" name="java-17-openjdk" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="2c6837937cabd3e2ab4ec8214c7f4b8715b807bf9a6a6dcdf27ac415e26e4b19" name="java-17-openjdk" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="697a737f1d63ad8b3344397ef43de0ef5c6266b700ef4d14e9a4f24251228537" name="java-17-openjdk" arch="src">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="9ad5d6929236f8beb4902fee16751bd8dc9d1091cbb904edaccdb91e1fbd5496" name="java-17-openjdk" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="1cf4eea3fb1e4dc0af1f5f1bafcefa0bab1bdcc6e1f0541b683357d94c4081c0" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="396d2be61aa15f71e067dd95c11ba61d076826158dcef63d9863550fa5502925" name="java-17-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="c16042173859e3fd8e4edf27b595da8e2e0294fd2fb06f7d04b9ce9c6fd6d493" name="java-17-openjdk-demo" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="6000450ffcc46cfe53c89b18514e0b0d0bafcab6f3744b932eba6a3d21d05f9c" name="java-17-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="5417ee61fef8f747e8b013572fcaeb76d58f38ffeb3842aecb654bf4058e6a44" name="java-17-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="27c0a1892b449e4a1dc9c197d0a00101d07f5aca0abf8e66cc66930dd22a8f77" name="java-17-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="92e9f36ec9d320d400a3cad0cf2d3508c58f3cbf1f143bc7e4fb9fec8074fdc7" name="java-17-openjdk-demo" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="86c731314b1e2f8a194e82e4c62899d4a68b6aacfbcec0118b058eb370936dcb" name="java-17-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="67598e53c622b6117bd32924d5c6d2117445a8c806115ea1b2e680c31548279d" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="a0fb7dfefa65b5c9139e5a1c2013fff347fe3aac12d70d87d590191ea4dee271" name="java-17-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="6bfde05f99d9d31c4b71f07c9f242ef360468914a47ff558b478754766ee8aa6" name="java-17-openjdk-devel" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="fbbb131e6d6bd68c3cb11ce9f969122cd79ce9ae5931e7578ed90bf3083dd700" name="java-17-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="f2142abede79ff1fb102dc146a5109e425bcd75e5bbe5e08996ddbcfe42ca8b3" name="java-17-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="0457f3ae60e5a23e67d8f40d9ccc84a5b593bbefc2a06d76268fb8e69fb10317" name="java-17-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="a27c9b08d73fe08c6bed55dc2cfc169c7888e16d9f7e13c71a47ead94401fe83" name="java-17-openjdk-devel" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="2caf321757a39b746ac13d2beda7c5eedd5dd9bf9b3618c669d0ec06bcbfef68" name="java-17-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="2ad1186867f887695c1f3b8ecd75b70b3a66a1a31f00d7b807472f90ea292f9a" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="0cd0dc924397583d70011bc673d5a8e359a02257cf433769a0345e9692463b05" name="java-17-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="8bd4f875ac7da28fe2b8e26b31b2bcd04b8af454dc4348a06f4e9767bee844fc" name="java-17-openjdk-headless" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="d0678eca1329f3599a890b2fbcca6d5ceb16df76aaa545dc9c3caf1af90d6ca8" name="java-17-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="7c068427022260450f065a46aa4e1fbadb483c9b7934e9e8f69d1917a47e52de" name="java-17-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="a7008cac49cd678839c839895ca44c2ce18971b449027b76babe78859101d305" name="java-17-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="d34ac727f4ce5224361e18934a70c1240f10f8c87c77a2d5f072a336c9aa6f6d" name="java-17-openjdk-headless" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="ea7ecc36dc9b65aff4044456024faba5b2e30ce93eb37041e86fa10a3706fe98" name="java-17-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="5c28faf9d9d2a7755a31b31d4f714e5852c6bb63504f7fde18b06002ac73f6b6" name="java-17-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="db5e66499d9139a5ea4b1099d6973b30644aa2b5ea46b633adea33490388a801" name="java-17-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="f3c8c53d410b3a32f7bd8908bfa667230229ef2d41dd25cd6880955b2137265b" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="9390df8c6086f0dc990085261066519f225aaa6522d2fec636d9496e08c8d189" name="java-17-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="b9a0e8b9d9e5fec7f607aa01664c4cbab0193f625bcdad17b22ccb422b5aee4c" name="java-17-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="46bc7589b36bcf5ee460fe3ac7fed926569978d0f47733f15ff2d4de148e1bab" name="java-17-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="3850486c982bad0ff335e1c6f5867ebb50e63d532454af75434bd06e3675dc13" name="java-17-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="79ab54ac490f88b794c06e10b7cac3badeb642faa1cde2204805f58bf421fdc5" name="java-17-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="a80c33c1bd322734ab5440f7d3e100fbeb00f0b6e4612b89bdbc8eacdcca9e15" name="java-17-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="c902051fdf82367ec268014d1fe8e8cec94d0150065c643be8e20b2af174caf3" name="java-17-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="c8aa8895261d130240a34a8e5ef8a190111930a96e35cbd19d6cc0c206722cd6" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="4ef2dad7a71a77a428086b5a6de481c7969110aa5454a0e9620c44046b411af4" name="java-17-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="b3928aa2620f469e5193f5b7af2ab7fc09c3e9c74b703c17077744e7fd1dc8ae" name="java-17-openjdk-src" arch="s390x">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="40fbb54a05a28f48e044e00d40fa910cfcb5fdbe90c3bc38e922f3f5f07ab5b3" name="java-17-openjdk-src" arch="x86_64">
  <version epoch="0" ver="17.0.7.0" rel="150400.3.24.1"/>
  <changelog author="fstrba@suse.com" date="1634904000">- Update to upstream tag jdk-17.0.1+12 (October 2021 CPU)
  * Security fixes
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes:
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8261088: Repeatable annotations without @Target cannot
    have containers that target module declarations
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8263531: Remove unused buffer int
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268500: Better specified ParameterSpecs
    + JDK-8268963: [IR Framework] Some default regexes matching on
    PrintOptoAssembly in IRNode.java do not work on all platforms
    + JDK-8269297: Bump version numbers for JDK 17.0.1
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269897: Shenandoah: Resolve UNKNOWN access strength,
    where possible
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270094: Shenandoah: Provide human-readable labels for
    test configurations
    + JDK-8270096: Shenandoah: Optimize
    gc/shenandoah/TestRefprocSanity.java for interpreter mode
    + JDK-8270098: ZGC: ZBarrierSetC2::clone_at_expansion fails
    with "Guard against surprises" assert
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270344: Session resumption errors
    + JDK-8271203: C2: assert(iff-&gt;Opcode() == Op_If ||
    iff-&gt;Opcode() == Op_CountedLoopEnd || iff-&gt;Opcode() ==
    Op_RangeCheck) failed: Check this code when new subtype is
    added
    + JDK-8271276: C2: Wrong JVM state used for receiver null check
    + JDK-8271335: Updating RE Configs for BUILD REQUEST 17.0.1+4
    + JDK-8271589: fatal error with variable shift count integer
    rotate operation.
    + JDK-8271723: Unproblemlist
    runtime/InvocationTests/invokevirtualTests.java
    + JDK-8271730: Client authentication using RSASSA-PSS fails
    after correct certificate requests
    + JDK-8271925: ZGC: Arraycopy stub passes invalid oop to load
    barrier
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272326: java/util/Random/RandomTestMoments.java had two
    Gaussian fails
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8273150: Revert "8225083: Remove Google certificate that
    is expiring in December 2021"
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * harfbuzz-libs.patch
  * openjdk-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
</package>
<package pkgid="3c9ccc3b3e4f773407db9c756f6b9fa3c768c8965344ec78939b26402a4fd227" name="java-17-openjdk-src" arch="aarch64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="78d8e1e2c8cdd5ea88fb8472f0fdfc9d70e12522b161a7b2f005e58089c625cd" name="java-17-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="b397b6529b4501181ad8ba40d842d853b0568c8c658e3d95ecc37db3f5901f23" name="java-17-openjdk-src" arch="s390x">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="a20c3b98f66abf8b176878a21aaefb77310cc9f59e66687eb2b1bbb42c1f8429" name="java-17-openjdk-src" arch="x86_64">
  <version epoch="0" ver="17.0.8.0" rel="150400.3.27.1"/>
  <changelog author="fstrba@suse.com" date="1636027200">- Modified patches:
  * PStack-808293.patch
  * adlc-parser.patch
  * alternative-tzdb_dat.patch
  * disable-doclint-by-default.patch
  * java-atk-wrapper-security.patch
  * jaw-jdk10.patch
  * jaw-misc.patch
  * loadAssistiveTechnologies.patch
  * memory-limits.patch
  * multiple-pkcs11-library-init.patch
  * ppc_stack_overflow_fix.patch
  * system-crypto-policy.patch
  * system-pcsclite.patch
  * zero-ranges.patch
    + Rediff to apply all hunks without shifts
  * fips.patch
    + Fix unused function compiler warning found in systemconf.c
    + Allow plain key import</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643976000">- Update to upstream tag jdk-17.0.2+8 (January 2022 CPU)
  * Security fixes
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
  * Other changes
    + JDK-4819544: SwingSet2 JTable Demo throws NullPointerException
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8140241: (fc) Data transfer from FileChannel to itself
    causes hang in case of overlap
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8233020: (fs) UnixFileSystemProvider should use
    StaticProperty.userDir().
    + JDK-8238649: Call new Win32 API SetThreadDescription in
    os::set_native_thread_name
    + JDK-8244675: assert(IncrementalInline ||
    (_late_inlines.length() == 0 &amp;&amp; !has_mh_late_inlines()))
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261579: AArch64: Support for weaker memory ordering in
    Atomic
    + JDK-8262031: Create implementation for
    NSAccessibilityNavigableStaticText protocol
    + JDK-8262095: NPE in Flow$FlowAnalyzer.visitApply: Cannot
    invoke getThrownTypes because tree.meth.type is null
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263364: sun/net/www/http/KeepAliveStream/
    /KeepAliveStreamCloseWithWrongContentLength.java wedged in
    getInputStream
    + JDK-8263375: Support stack watermarks in Zero VM
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8264286: Create implementation for NSAccessibilityColumn
    protocol peer
    + JDK-8264287: Create implementation for
    NSAccessibilityComboBox protocol peer
    + JDK-8264291: Create implementation for NSAccessibilityCell
    protocol peer
    + JDK-8264292: Create implementation for NSAccessibilityList
    protocol peer
    + JDK-8264293: Create implementation for NSAccessibilityMenu
    protocol peer
    + JDK-8264294: Create implementation for NSAccessibilityMenuBar
    protocol peer
    + JDK-8264295: Create implementation for
    NSAccessibilityMenuItem protocol peer
    + JDK-8264296: Create implementation for
    NSAccessibilityPopUpButton protocol peer
    + JDK-8264297: Create implementation for
    NSAccessibilityProgressIndicator protocol peer
    + JDK-8264298: Create implementation for NSAccessibilityRow
    protocol peer
    + JDK-8264303: Create implementation for
    NSAccessibilityTabGroup protocol peer
    + JDK-8266239: Some duplicated javac command-line options have
    repeated effect
    + JDK-8266510: Nimbus JTree default tree cell renderer does not
    use selected text color
    + JDK-8266988: compiler/jvmci/compilerToVM/IsMatureTest.java
    fails with Unexpected isMature state for multiple times
    invoked method: expected false to equal true
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267385: Create NSAccessibilityElement implementation for
    JavaComponentAccessibility
    + JDK-8267387: Create implementation for NSAccessibilityOutline
    protocol
    + JDK-8267388: Create implementation for NSAccessibilityTable
    protocol
    + JDK-8268284: javax/swing/JComponent/7154030/bug7154030.java
    fails with "Exception: Failed to hide opaque button"
    + JDK-8268294: Reusing HttpClient in a WebSocket.Listener hangs.
    + JDK-8268361: Fix the infinite loop in next_line
    + JDK-8268457: XML Transformer outputs Unicode supplementary
    character incorrectly to HTML
    + JDK-8268464: Remove dependancy of TestHttpsServer,
    HttpTransaction, HttpCallback from
    open/test/jdk/sun/net/www/protocol/https/ tests
    + JDK-8268626: Remove native pre-jdk9 support for jtreg
    failure handler
    + JDK-8268860: Windows-Aarch64 build is failing in GitHub
    actions
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8268885: duplicate checkcast when destination type is not
    first type of intersection type
    + JDK-8268893: jcmd to trim the glibc heap
    + JDK-8268894: forged ASTs can provoke an AIOOBE at
    com.sun.tools.javac.jvm.ClassWriter::writePosition
    + JDK-8268927: Windows: link error: unresolved external symbol
    "int __cdecl convert_to_unicode(char const *,wchar_t * *)"
    + JDK-8269031: linux x86_64 check for binutils 2.25 or higher
    after 8265783
    + JDK-8269113: Javac throws when compiling switch (null)
    + JDK-8269216: Useless initialization in
    com/sun/crypto/provider/PBES2Parameters.java
    + JDK-8269269: [macos11] SystemIconTest fails with
    ClassCastException
    + JDK-8269280: (bf) Replace StringBuffer in *Buffer.toString()
    + JDK-8269481: SctpMultiChannel never releases own file
    descriptor
    + JDK-8269637: javax/swing/JFileChooser/FileSystemView/
    /SystemIconTest.java fails on windows
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269687: pauth_aarch64.hpp include name is incorrect
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269924: Shenandoah: Introduce weak/strong marking asserts
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8270110: Shenandoah: Add test for JDK-8269661
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270171: Shenandoah: Cleanup TestStringDedup and
    TestStringDedupStress tests
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270320: JDK-8270110 committed invalid copyright headers
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8270901: Typo PHASE_CPP in CompilerPhaseType
    + JDK-8270946: X509CertImpl.getFingerprint should not return
    the empty String
    + JDK-8271071: accessibility of a table on macOS lacks cell
    navigation
    + JDK-8271121: ZGC: stack overflow (segv) when
  - Xlog:gc+start=debug
    + JDK-8271142: package help is not displayed for missing
    X11/extensions/Xrandr.h
    + JDK-8271170: Add unit test for what jpackage app launcher
    puts in the environment
    + JDK-8271215: Fix data races in G1PeriodicGCTask
    + JDK-8271254: javac generates unreachable code when using
    empty semicolon statement
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271308: (fc) FileChannel.transferTo() transfers no more
    than Integer.MAX_VALUE bytes in one call
    + JDK-8271315: Redo: Nimbus JTree renderer properties persist
    across L&amp;F changes
    + JDK-8271323: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -XX:TieredStopAtLevel=1
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271463: Updating RE Configs for Upcoming CPU Release
    17.0.2 on master branch for jdk17u-cpu and jdk17u-cpu-open
    repos.
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8271600: C2: CheckCastPP which should closely follow
    Allocate is sunk of a loop
    + JDK-8271605: Update JMH devkit to 1.32
    + JDK-8271718: Crash when during color transformation the color
    profile is replaced
    + JDK-8271722: [TESTBUG] gc/g1/TestMixedGCLiveThreshold.java
    can fail if G1 Full GC uses &gt;1 workers
    + JDK-8271855: [TESTBUG] Wrong weakCompareAndSet assumption in
    UnsafeIntrinsicsTest
    + JDK-8271862: C2 intrinsic for Reference.refersTo() is often
    not used
    + JDK-8271868: Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8271895: UnProblemList
    javax/swing/JComponent/7154030/bug7154030.java in JDK18
    + JDK-8271954: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272047: java/nio/channels/FileChannel/Transfer2GPlus.java
    failed with Unexpected transfer size: 2147418112
    + JDK-8272095: ProblemList java/nio/channels/FileChannel/
    /Transfer2GPlus.java on linux-aarch64
    + JDK-8272114: Unused _last_state in osThread_windows
    + JDK-8272170: Missing memory barrier when checking active
    state for regions
    + JDK-8272305: several hotspot runtime/modules don't check exit
    codes
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272328: java.library.path is not set properly by Windows
    jpackage app launcher
    + JDK-8272335: runtime/cds/appcds/MoveJDKTest.java doesn't
    check exit codes
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8272369: java/io/File/GetXSpace.java failed with
    "RuntimeException: java.nio.file.NoSuchFileException:
    /run/user/0"
    + JDK-8272391: Undeleted debug information
    + JDK-8272413: Incorrect num of element count calculation for
    vector cast
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8272562: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272639: jpackaged applications using microphone on mac
    + JDK-8272703: StressSeed should be set via FLAG_SET_ERGO
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272838: Move CriticalJNI tests out of tier1
    + JDK-8272846: Move some runtime/Metaspace/elastic/ tests out
    of tier1
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272854: split
    runtime/CommandLine/PrintTouchedMethods.java test
    + JDK-8272856: DoubleFlagWithIntegerValue uses G1GC-only flag
    + JDK-8272859: Javadoc external links should only have feature
    version number in URL
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272970: Parallelize runtime/InvocationTests/
    + JDK-8272973: Incorrect compile command used by
    TestIllegalArrayCopyBeforeInfiniteLoop
    + JDK-8273021: C2: Improve Add and Xor ideal optimizations
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273135: java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java crashes in liblcms.dylib
    with NULLSeek+0x7
    + JDK-8273165: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273234: extended 'for' with expression of type tvar
    causes the compiler to crash
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273278: Support XSLT on GraalVM Native
    Image--deterministic bytecode generation in XSLT
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273315: Parallelize and increase timeouts for
    java/foreign/TestMatrix.java test
    + JDK-8273318: Some containers/docker/TestJFREvents.java
    configs are running out of memory
    + JDK-8273333: Zero should warn about unimplemented
  - XX:+LogTouchedMethods
    + JDK-8273335: compiler/blackhole tests should not run with
    interpreter-only VMs
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273359: CI: ciInstanceKlass::get_canonical_holder()
    doesn't respect instance size
    + JDK-8273361: InfoOptsTest is failing in tier1
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273375: Remove redundant 'new String' calls after
    concatenation in java.desktop
    + JDK-8273376: Zero: Disable vtable/itableStub gtests
    + JDK-8273378: Shenandoah: Remove the remaining uses of
    os::is_MP
    + JDK-8273408: java.lang.AssertionError: typeSig ERROR on
    generated class property of record
    + JDK-8273416: C2: assert(false) failed: bad AD file after
    JDK-8252372 with UseSSE={0,1}
    + JDK-8273440: Zero: Disable
    runtime/Unsafe/InternalErrorTest.java
    + JDK-8273450: Fix the copyright header of SVML files
    + JDK-8273451: Remove unreachable return in  mutexLocker::wait
    + JDK-8273483: Zero: Clear pending JNI exception check in
    native method handler
    + JDK-8273486: Zero: Handle DiagnoseSyncOnValueBasedClasses VM
    option
    + JDK-8273487: Zero: Handle "zero" variant in runtime tests
    + JDK-8273489: Zero: Handle UseHeavyMonitors on all
    monitorenter paths
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273505: runtime/cds/appcds/loaderConstraints/
    /DynamicLoaderConstraintsTest.java#default-cl crashed with
    SIGSEGV in MetaspaceShared::link_shared_classes
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8273592: Backout JDK-8271868
    + JDK-8273593: [REDO] Warn user when using mac-sign option with
    unsigned app-image.
    + JDK-8273595: tools/jpackage tests do not work on apt-based
    Linux distros like Debian
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273614: Shenandoah: intermittent  timeout with
    ConcurrentGCBreakpoint tests
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273678: TableAccessibility and TableRowAccessibility
    miss autorelease
    + JDK-8273695: Safepoint deadlock on VMOperation_lock
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273806: compiler/cpuflags/TestSSE4Disabled.java should
    test for CPU feature explicitly
    + JDK-8273807: Zero: Drop incorrect test block from
    compiler/startup/NumCompilerThreadsCheck.java
    + JDK-8273808: Cleanup AddFontsToX11FontPath
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273887: [macos] java/awt/color/ICC_ColorSpace/
    /MTTransformReplacedProfile.java timed out
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273902: Memory leak in OopStorage due to bug in
    OopHandle::release()
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273935: (zipfs) Files.getFileAttributeView() throws UOE
    instead of returning null when view not supported
    + JDK-8273958: gtest/MetaspaceGtests executes unnecessary tests
    in debug builds
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273965: some testlibrary_tests/ir_framework tests fail
    when c1 disabled
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274074: SIGFPE with C2 compiled code with -XX:+StressGCM
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274087: Windows DLL path not set correctly.
    + JDK-8274145: C2: condition incorrectly made redundant with
    dominating main loop exit condition
    + JDK-8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from
    KDC
    + JDK-8274215: Remove globalsignr2ca root from 17.0.2
    + JDK-8274242: Implement fast-path for ASCII-compatible
    CharsetEncoders on x86
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274325: C4819 warning at vm_version_x86.cpp on Windows
    after JDK-8234160
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8274347: Passing a *nested* switch expression as a
    parameter causes an NPE during compile
    + JDK-8274349: ForkJoinPool.commonPool() does not work with 1
    CPU
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274383: JNI call of getAccessibleSelection on a wrong
    thread
    + JDK-8274401: C2: GraphKit::load_array_element bypasses Access
    API
    + JDK-8274406: RunThese30M.java failed
    "assert(!LCA_orig-&gt;dominates(pred_block) ||
    early-&gt;dominates(pred_block)) failed: early is high enough"
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274435: EXCEPTION_ACCESS_VIOLATION in
    BFSClosure::closure_impl
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274501: c2i entry barriers read int as long on AArch64
    + JDK-8274521: jdk/jfr/event/gc/detailed/TestGCLockerEvent.java
    fails when other GC is selected
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274523: java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8274550: c2i entry barriers read int as long on PPC
    + JDK-8274560: JFR: Add test for OldObjectSample event when
    using Shenandoah
    + JDK-8274606: Fix jaxp/javax/xml/jaxp/unittest/transform/
    /SurrogateTest.java test
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274716: JDWP Spec: the description for the Dispose
    command confuses suspend with resume.
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8274770: [PPC64] resolve_jobject needs a generic
    implementation to support load barriers
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274848: LambdaMetaFactory::metafactory on
    REF_invokeSpecial impl method has incorrect behavior
    + JDK-8274851: [ppc64] Port zgc to linux on ppc64le
    + JDK-8274942: AssertionError at
    jdk.compiler/com.sun.tools.javac.util.Assert.error(Assert.java:155)
    + JDK-8275008: gtest build failure due to stringop-overflow
    warning with gcc11
    + JDK-8275049: [ZGC] missing null check in
    ZNMethod::log_register
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275071: [macos] A11y cursor gets stuck when combobox is
    closed
    + JDK-8275104: IR framework does not handle client VM builds
    correctly
    + JDK-8275110: Correct RE Configs for CPU Release 17.0.2 on
    master branch for jdk17u-cpu and jdk17u-cpu-open repos.
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275141: recover corrupted line endings for the
    version-numbers.conf
    + JDK-8275145: file.encoding system property has an incorrect
    value on Windows
    + JDK-8275226: Shenandoah: Relax memory constraint for worker
    claiming tasks/ranges
    + JDK-8275302: unexpected compiler error: cast, intersection
    types and sealed
    + JDK-8275426: PretouchTask num_chunks calculation can overflow
    + JDK-8275604: Zero: Reformat opclabels_data
    + JDK-8275666: serviceability/jvmti/GetObjectSizeClass.java
    shouldn't have vm.flagless
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8275720: CommonComponentAccessibility.createWithParent
    isWrapped causes mem leak
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275809: crash in [CommonComponentAccessibility
    getCAccessible:withEnv:]
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8275819: [TableRowAccessibility accessibilityChildren]
    method is ineffective
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8275863: Use encodeASCII for ASCII-compatible DoubleByte
    encodings
    + JDK-8275872: Sync J2DBench run and analyze Makefile targets
    with build.xml
    + JDK-8276025: Hotspot's libsvml.so may conflict with user
    dependency
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276076: Updating RE Configs for BUILD REQUEST 17.0.2+3
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8276112: Inconsistent scalar replacement debug info at
    safepoints
    + JDK-8276122: Change openjdk project in jcheck to jdk-updates
    + JDK-8276130: Fix Github Actions of JDK17u to account for
    update version scheme
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276205: Shenandoah: CodeCache_lock should always be held
    for initializing code cache iteration
    + JDK-8276306: jdk/jshell/CustomInputToolBuilder.java fails
    intermittently on storage acquisition
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276572: Fake libsyslookup.so library causes tooling
    issues
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276801: gc/stress/CriticalNativeStress.java fails
    intermittently with Shenandoah
    + JDK-8276805: java/awt/print/PrinterJob/CheckPrivilege.java
    fails due to disabled SecurityManager
    + JDK-8276845: (fs) java/nio/file/spi/SetDefaultProvider.java
    fails on x86_32
    + JDK-8276846: JDK-8273416 is incomplete for UseSSE=1
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8276864: Update boot JDKs to 17.0.1 in GHA
    + JDK-8276905: Use appropriate macosx_version_minimum value
    while compiling metal shaders
    + JDK-8276927: [ppc64] Port shenandoahgc to linux on ppc64le
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277093: Vector should throw ClassNotFoundException for a
    missing class of an element
    + JDK-8277159: Fix java/nio/file/FileStore/Basic.java test by
    ignoring /run/user/* mount points
    + JDK-8277195: missing CAccessibility definition in
    [CommonComponentAccessibility accessibilityHitTest]
    + JDK-8277212: GC accidentally cleans valid megamorphic vtable
    inline caches
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277981: String Deduplication table is never cleaned up
    due to bad dead_factor_for_cleanup
- Modified patch:
  * fips.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Modified patch:
  * disable-doclint-by-default.patch
    + try actually disable the doclint by default</changelog>
  <changelog author="fstrba@suse.com" date="1647864000">- Added patch:
  * JDK-8282944.patch
    + Upstream fix for JDK-8281944: JavaDoc throws
    java.lang.IllegalStateException: ERRONEOUS</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Set a non-zero alternatives priority for Factory builds
- Added patch:
  * JDK-8282004.patch
    + fix missing CALL effects on x86_32</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-17.0.3+7 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272588: Enhanced recording parsing
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8277233, bsc#1198670, CVE-2022-21449: Improve ECDSA
    signature support
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8274471: Add support for RSASSA-PSS in OCSP Response
    + JDK-8282219: jdk/java/lang/ProcessBuilder/Basic.java fails on
    AIX
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8276841: Add support for Visual Studio 2022
    + JDK-8272866: java.util.random package summary contains
    incorrect mixing function in table
    + JDK-8272996: JNDI DNS provider fails to resolve SRV entries
    when IPV6 stack is enabled
    + JDK-8278185: Custom JRE cannot find non-ASCII named module
    inside
    + JDK-8281460: Let ObjectMonitor have its own NMT category
    + JDK-8278163: --with-cacerts-src variable resolved after
    GenerateCacerts recipe setup
    + JDK-8277383: VM.metaspace optionally show chunk freelist
    details
    + JDK-8271721: Split gc/g1/TestMixedGCLiveThreshold into
    separate tests
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8270117: Broken jtreg link in "Building the JDK" page
    + JDK-8279695: [TESTBUG] modify compiler/loopopts/
    /TestSkeletonPredicateNegation.java to run on C1 also
    + JDK-8278080: Add --with-cacerts-src='user cacerts folder' to
    enable deterministic cacerts generation
    + JDK-8277762: Allow configuration of HOTSPOT_BUILD_USER
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8278346: java/nio/file/Files/probeContentType/Basic.java
    fails on Linux SLES15 machine
    + JDK-8274171: java/nio/file/Files/probeContentType/Basic.java
    failed on "Content type" mismatches
    + JDK-8274562: (fs) UserDefinedFileAttributeView doesn't
    correctly determine if supported when using OverlayFS
    + JDK-8273655: content-types.properties files are missing some
    common types
    + JDK-8279385: [test]  Adjust sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java after 8278344
    + JDK-8280373: Update Xalan serializer / SystemIDResolver to
    align with JDK-8270492
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8272600: (test) Use native "sleep" in Basic.java
    + JDK-8271199: Mutual TLS handshake fails signing client
    certificate with custom sensitive PKCS11 key
    + JDK-8277299: STACK_OVERFLOW in
    Java_sun_awt_shell_Win32ShellFolder2_getIconBits
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8275330: C2:  assert(n-&gt;is_Root() || n-&gt;is_Region() ||
    n-&gt;is_Phi() || n-&gt;is_MachMerge() ||
    def_block-&gt;dominates(block)) failed: uses must be dominated by
    definitions
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8274750: java/io/File/GetXSpace.java failed: '/dev':
    191488 != 190976
    + JDK-8273387: remove some unreferenced gtk-related functions
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8277180: Intrinsify recursive ObjectMonitor locking for
    C2 x64 and A64
    + JDK-8277449: compiler/vectorapi/TestLongVectorNeg.java fails
    with release VMs
    + JDK-8275643: C2's unaryOp vector intrinsic does not properly
    handle LongVector.neg
    + JDK-8271056: C2: "assert(no_dead_loop) failed: dead loop
    detected" due to cmoving identity
    + JDK-8275847: Scheduling fails with "too many D-U pinch
    points" on small method
    + JDK-8274944: AppCDS dump causes SEGV in VM thread while
    adjusting lambda proxy class info
    + JDK-8275874: [JVMCI] only support aligned reads in
    c2v_readFieldValue
    + JDK-8271506: Add ResourceHashtable support for deleting
    selected entries
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8279124: VM does not handle SIGQUIT during initialization
    + JDK-8277497: Last column cell in the JTable row is read as
    empty cell
    + JDK-8278604: SwingSet2 table demo does not have accessible
    description set for images 8278526: [macos] Screen reader
    reads SwingSet2 JTable row selection as null, dimmed row for
    last column
    + JDK-8275645: [JVMCI] avoid unaligned volatile reads on AArch64
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8273381: Assert in
    PtrQueueBufferAllocatorTest.stress_free_list_allocator_vm
    + JDK-8269616: serviceability/dcmd/framework/VMVersionTest.java
    fails with Address already in use error
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8279445: Update JMH devkit to 1.34
    + JDK-8274753: ZGC: SEGV in MetaspaceShared::link_shared_classes
    8274935: dumptime_table has stale entry
    + JDK-8251216: Implement MD5 intrinsics on AArch64
    + JDK-8278241: Implement JVM SpinPause on linux-aarch64
    + JDK-8275608: runtime/Metaspace/elastic/
    /TestMetaspaceAllocationMT2 too slow
    + JDK-8276057: Update JMH devkit to 1.33
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8272553: several hotspot runtime/CommandLine tests don't
    check exit code
    + JDK-8275687: runtime/CommandLine/PrintTouchedMethods test
    shouldn't catch RuntimeException
    + JDK-8278344: sun/security/pkcs12/
    /KeytoolOpensslInteropTest.java test fails because of
    different openssl output
    + JDK-8273972: Multi-core choke point in CMM engine
    (LCMSTransform.doTransform)
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8278389: SuspendibleThreadSet::_suspend_all should be
    volatile/atomic
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8277503: compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java failed with
    "OnSpinWaitInst with the expected value 'isb' not found."
    + JDK-8277137: Set OnSpinWaitInst/OnSpinWaitInstCount defaults
    to "isb"/1 for Arm Neoverse N1
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8269032: Stringdedup tests are failing if the
    ergonomically select GC does not support it
    + JDK-8186670: Implement _onSpinWait() intrinsic for AArch64
    + JDK-8276766: Enable jar and jmod to produce deterministic
    timestamped content 8279453: Disable tools/jar/
    /ReproducibleJar.java on 32-bit platforms
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8280002: jmap -histo may leak stream
    + JDK-8277069: [REDO] JDK-8276743 Make openjdk build Zip
    Archive generation "reproducible"
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8279412: [JVMCI] failed speculations list must outlive
    any nmethod that refers to it
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8263567: gtests don't terminate the VM safely
    + JDK-8269206: A small typo in comment in
    test/lib/sun/hotspot/WhiteBox.java
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8274506: TestPids.java and TestPidsLimit.java fail with
    podman run as root
    + JDK-8276764: Enable deterministic file content ordering for
    Jar and Jmod
    + JDK-8273967: gtest
    os.dll_address_to_function_and_library_name_vm fails on
    macOS12
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8277846: Implement fast-path for ASCII-compatible
    CharsetEncoders on ppc64
    + JDK-8273526: Extend the OSContainer API  pids controller with
    pids.current
    + JDK-8269849: vmTestbase/gc/gctests/PhantomReference/
    /phantom002/TestDescription.java failed with
    "OutOfMemoryError: Java heap space: failed reallocation of
    scalar replaced objects"
    + JDK-8269087: CheckSegmentedCodeCache test fails in an
    emulated-client VM
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8279505: Update documentation for RETRY_COUNT and
    REPEAT_COUNT
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8276654: element-list order is non deterministic
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8269037: jsig/Testjsig.java doesn't have to be restricted
    to linux only
    + JDK-8269523: runtime/Safepoint/
    /TestAbortOnVMOperationTimeout.java failed when expecting
    'VM operation took too long'
    + JDK-8244602: Add JTREG_REPEAT_COUNT to repeat execution of a
    test
    + JDK-8272398: Update DockerTestUtils.buildJdkDockerImage()
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278020: ~13% variation in Renaissance-Scrabble
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8266490: Extend the OSContainer API to support the pids
    controller of cgroups
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8278987: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in __write_sample_info__
    + JDK-8278627: Shenandoah: TestHeapDump test failed
    + JDK-8278824: Uneven work distribution when scanning heap
    roots in G1
    + JDK-8278239: vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefine failed with EXCEPTION_ACCESS_VIOLATION at
    0x000000000000000d
    + JDK-8277919: OldObjectSample event causing bloat in the class
    constant pool in JFR recording
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8278104: C1 should support the compiler directive
    'BreakAtExecute'
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8275800: Redefinition leaks MethodData::_extra_data_lock
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8274130: C2: MulNode::Ideal chained transformations may
    act on wrong nodes
    + JDK-8279011: JFR: JfrChunkWriter incorrectly handles int64_t
    chunk size as size_t
    + JDK-8276662: Scalability bottleneck in
    SymbolTable::lookup_common()
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8273895: compiler/ciReplay/TestVMNoCompLevel.java fails
    due to wrong data size with TieredStopAtLevel=2,3
    + JDK-8272167: AbsPathsInImage.java should skip *.dSYM
    directories
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8278099: two sun/security/pkcs11/Signature tests failed
    with AssertionError
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8277777: [Vector API] assert(r-&gt;is_XMMRegister()) failed:
    must be in x86_32.ad
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8273704: DrawStringWithInfiniteXform.java failed:
    drawString with InfiniteXform transform takes long time
    + JDK-8273162: AbstractSplittableWithBrineGenerator does not
    create a random salt
    + JDK-8273351: bad tag in jdk.random module-info.java
    + JDK-8247980: Exclusive execution of java/util/stream tests
    slows down tier1
    + JDK-8272327: Shenandoah: Avoid enqueuing duplicate string
    candidates
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8278016: Add compiler tests to tier{2,3}
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8275586: Zero: Simplify interpreter initialization
    + JDK-8269175: [macosx-aarch64] wrong CPU speed in hs_err file
- Do not include back the JavaEE modules in the JDK
- Removed patches:
  * activation-module.patch
  * annotation-module.patch
    + The pached JavaEE modules do not exist any more</changelog>
  <changelog author="fstrba@suse.com" date="1658404800">- Update to upstream tag jdk-17.0.4+8 (July 2022 CPU)
  * Security fixes:
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Other fixes:
    + JDK-8139173: [macosx] JInternalFrame shadow is not properly
    drawn
    + JDK-8181571: printing to CUPS fails on mac sandbox app
    + JDK-8193682: Infinite loop in ZipOutputStream.close()
    + JDK-8206187:javax/management/remote/mandatory/connection/
    /DefaultAgentFilterTest.java fails with Port already in use
    + JDK-8209776: Refactor jdk/security/JavaDotSecurity/ifdefs.sh
    to plain java test
    + JDK-8214733: runtime/8176717/TestInheritFD.java timed out
    + JDK-8236136: tests which use CompilationMode shouldn't be run
    w/ TieredStopAtLevel
    + JDK-8240756: [macos] SwingSet2:TableDemo:Printed Japanese
    characters were garbled
    + JDK-8249592: Robot.mouseMove moves cursor to incorrect
    location when display scale varies and Java runs in DPI
    Unaware mode
    + JDK-8251904: vmTestbase/nsk/sysdict/vm/stress/btree/btree010/
    /btree010.java fails with ClassNotFoundException:
    nsk.sysdict.share.BTree0LLRLRLRRLR
    + JDK-8255266: Update Public Suffix List to 3c213aa
    + JDK-8256368: Avoid repeated upcalls into Java to re-resolve
    MH/VH linkers/invokers
    + JDK-8258814: Compilation logging crashes for thread
    suspension / debugging tests
    + JDK-8263461: jdk/jfr/event/gc/detailed/
    /TestEvacuationFailedEvent.java uses wrong mechanism to cause
    evacuation failure
    + JDK-8263538: SharedArchiveConsistency.java should test
  - Xshare:auto as well
    + JDK-8264605: vmTestbase/nsk/jvmti/SuspendThread/
    /suspendthrd003/TestDescription.java failed with
    "agent_tools.cpp, 471: (foundThread = (jthread)
    jni_env-&gt;NewGlobalRef(foundThread)) != NULL"
    + JDK-8265261: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8265317: [vector] assert(payload-&gt;is_object()) failed:
    expected 'object' value for scalar-replaced boxed vector but
    got: NULL
    + JDK-8267163: Rename anonymous loader tests to hidden loader
    tests
    + JDK-8268231: Aarch64: Use Ldp in intrinsics for
    String.compareTo
    + JDK-8268558: [TESTBUG] Case 2 in
    TestP11KeyFactoryGetRSAKeySpec is skipped
    + JDK-8268595: java/io/Serializable/serialFilter/
    /GlobalFilterTest.java#id1 failed in timeout
    + JDK-8268773: Improvements related to: Failed to start thread
  - pthread_create failed (EAGAIN)
    + JDK-8268906: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    assumes that GCs take 1ms minimum
    + JDK-8269077: TestSystemGC uses "require vm.gc.G1" for large
    pages subtest
    + JDK-8269129: Multiple tier1 tests in hotspot/jtreg/compiler
    are failing for client VMs
    + JDK-8269135: TestDifferentProtectionDomains runs into timeout
    in client VM
    + JDK-8269373: some tests in jdk/tools/launcher/ fails on
    localized Windows platform
    + JDK-8269753: Misplaced caret in PatternSyntaxException's
    detail message
    + JDK-8269933: test/jdk/javax/net/ssl/compatibility/JdkInfo
    incorrect verification of protocol and cipher support
    + JDK-8270021: Incorrect log decorators in
    gc/g1/plab/TestPLABEvacuationFailure.java
    + JDK-8270336: [TESTBUG] Fix initialization in NonbranchyTree
    + JDK-8270435: UT: MonitorUsedDeflationThresholdTest failed:
    did not find too_many string in output
    + JDK-8270468: TestRangeCheckEliminated fails because methods
    are not compiled
    + JDK-8270797: ShortECDSA.java test is not complete
    + JDK-8270837: fix typos in test TestSigParse.java
    + JDK-8271008: appcds/*/MethodHandlesAsCollectorTest.java
    tests time out because of excessive GC (CodeCache GC
    Threshold) in loom
    + JDK-8271055: Crash during deoptimization with
    "assert(bb-&gt;is_reachable()) failed: getting result from
    unreachable basicblock" with -XX:+VerifyStack
    + JDK-8271224: runtime/EnclosingMethodAttr/EnclMethodAttr.java
    doesn't check exit code
    + JDK-8271302: Regex Test Refresh
    + JDK-8272146: Disable Fibonacci test on memory constrained
    systems
    + JDK-8272168: some hotspot runtime/logging tests don't check
    exit code
    + JDK-8272169: runtime/logging/LoaderConstraintsTest.java
    doesn't build test.Empty
    + JDK-8272358: Some tests may fail when executed with other
    locales than the US
    + JDK-8272493: Suboptimal code generation around
    Preconditions.checkIndex intrinsic with AVX2
    + JDK-8272908: Missing coverage for certain classes in
    com.sun.org.apache.xml.internal.security
    + JDK-8272964: java/nio/file/Files/InterruptCopy.java fails
    with java.lang.RuntimeException: Copy was not interrupted
    + JDK-8273056, CVE-2022-21549, bsc#1201685: java.util.random
    does not correctly sample exponential or Gaussian
    distributions
    + JDK-8273095: vmTestbase/vm/mlvm/anonloader/stress/oome/heap/
    /Test.java fails with "wrong OOME"
    + JDK-8273139: C2: assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed: Incorrect
    frequency
    + JDK-8273142: Remove dependancy of TestHttpServer,
    HttpTransaction, HttpCallback from open/test/jdk/sun/net/www/
    /protocol/http/ tests
    + JDK-8273169: java/util/regex/NegativeArraySize.java failed
    after JDK-8271302
    + JDK-8273804: Platform.isTieredSupported should handle the
    no-compiler case
    + JDK-8274172: Convert JavadocTester to use NIO
    + JDK-8274233: Minor cleanup for ToolBox
    + JDK-8274244: ReportOnImportedModuleAnnotation.java fails on
    rerun
    + JDK-8274561: sun/net/ftp/TestFtpTimeValue.java timed out on
    slow machines
    + JDK-8274687: JDWP deadlocks if some Java thread reaches wait
    in blockOnDebuggerSuspend
    + JDK-8274735: javax.imageio.IIOException: Unsupported Image
    Type  while processing a valid JPEG image
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8274855: vectorapi tests failing with
    assert(!vbox-&gt;is_Phi()) failed
    + JDK-8274939: Incorrect size of the pixel storage is used by
    the robot on macOS
    + JDK-8274983: C1 optimizes the invocation of private interface
    methods
    + JDK-8275037: Test vmTestbase/nsk/sysdict/vm/stress/btree/
    /btree011/btree011.java crashes with memory exhaustion on
    Windows
    + JDK-8275337: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8275638: GraphKit::combine_exception_states fails with
    "matching stack sizes" assert
    + JDK-8275745: Reproducible copyright headers
    + JDK-8275830: C2: Receiver downcast is missing when inlining
    through method handle linkers
    + JDK-8275854: C2: assert(stride_con != 0) failed: missed some
    peephole opt
    + JDK-8276260: (se) Remove java/nio/channels/Selector/
    /Wakeup.java from ProblemList (win)
    + JDK-8276657: XSLT compiler tries to define a class with empty
    name
    + JDK-8276796: gc/TestSystemGC.java large pages subtest fails
    with ZGC
    + JDK-8276825: hotspot/runtime/SelectionResolution test errors
    + JDK-8276863: Remove test/jdk/sun/security/ec/
    /ECDSAJavaVerify.java
    + JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir
    as unnecessary
    + JDK-8276990: Memory leak in invoker.c fillInvokeRequest()
    during JDI operations
    + JDK-8277055: Assert "missing inlining msg" with
  - XX:+PrintIntrinsics
    + JDK-8277072: ObjectStreamClass caches keep ClassLoaders alive
    + JDK-8277087: ZipException: zip END header not found at
    ZipFile#Source.findEND
    + JDK-8277165: jdeps --multi-release --print-module-deps fails
    if module-info.class in different versioned directories
    + JDK-8277166: Data race in jdeps VersionHelper
    + JDK-8277123: jdeps does not report some exceptions correctly
    + JDK-8277396: [TESTBUG] In DefaultButtonModelCrashTest.java,
    frame is accessed from main thread
    + JDK-8277422: tools/jar/JarEntryTime.java fails with modified
    time mismatch
    + JDK-8277893: Arraycopy stress tests
    + JDK-8277906: Incorrect type for IV phi of long counted loops
    after CCP
    + JDK-8277922: Unable to click JCheckBox in JTable through Java
    Access Bridge
    + JDK-8278014: [vectorapi] Remove test run script
    + JDK-8278065: Refactor subclassAudits to use ClassValue
    + JDK-8278186: org.jcp.xml.dsig.internal.dom.Utils
    .parseIdFromSameDocumentURI throws
    StringIndexOutOfBoundsException when calling substring method
    + JDK-8278472: Invalid value set to CANDIDATEFORM structure
    + JDK-8278519: serviceability/jvmti/FieldAccessWatch/
    /FieldAccessWatch.java failed "assert(handle != __null)
    failed: JNI handle should not be null"
    + JDK-8278549: UNIX sun/font coding misses SUSE distro
    detection on recent distro SUSE 15
    + JDK-8278766: Enable OpenJDK build support for reproducible
    jars and jmods using --date
    + JDK-8278794: Infinite loop in DeflaterOutputStream.finish()
    + JDK-8278796: Incorrect behavior of FloatVector.withLane on X86
    + JDK-8278851: Correct signer logic for jars signed with
    multiple digestalgs
    + JDK-8278948: compiler/vectorapi/reshape/
    /TestVectorCastAVX1.java crashes in assembler
    + JDK-8278966: two microbenchmarks tests fail
    "assert(!jvms-&gt;method()-&gt;has_exception_handlers()) failed: no
    exception handler expected" after JDK-8275638
    + JDK-8279182: MakeZipReproducible ZipEntry timestamps not
    localized to UTC
    + JDK-8279219: [REDO] C2 crash when allocating array of size
    too large
    + JDK-8279227: Access Bridge: Wrong frame position and hit test
    result on HiDPI display
    + JDK-8279356: Method linking fails with
    guarantee(mh-&gt;adapter() != NULL) failed: Adapter blob must
    already exist!
    + JDK-8279437: [JVMCI] exception in
    HotSpotJVMCIRuntime.translate can exit the VM
    + JDK-8279515: C1: No inlining through invokedynamic and
    invokestatic call sites when resolved class is not linked
    + JDK-8279520: SPNEGO has not passed channel binding info into
    the underlying mechanism
    + JDK-8279529: ProblemList java/nio/channels/DatagramChannel/
    /ManySourcesAndTargets.java on macosx-aarch64
    + JDK-8279532: ProblemList sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java
    + JDK-8279560: AArch64:
    generate_compare_long_string_same_encoding and
    LARGE_LOOP_PREFETCH alignment
    + JDK-8279586: [macos] custom JCheckBox and JRadioBox with
    custom icon set: focus is still displayed after unchecking
    + JDK-8279597: [TESTBUG] ReturnBlobToWrongHeapTest.java fails
    with -XX:TieredStopAtLevel=1 on machines with many cores
    + JDK-8279668: x86: AVX2 versions of vpxor should be asserted
    + JDK-8279822: CI: Constant pool entries in error state are not
    supported
    + JDK-8279834: Alpine Linux fails to build when
  - -with-source-date enabled
    + JDK-8279837: C2: assert(is_Loop()) failed: invalid node
    class: Region
    + JDK-8279842: HTTPS Channel Binding support for Java
    GSS/Kerberos
    + JDK-8279958: Provide configure hints for Alpine/apk package
    managers
    + JDK-8280004: DCmdArgument&lt;jlong&gt;::parse_value() should handle
    NULL input
    + JDK-8280041: Retry loop issues in java.io.ClassCache
    + JDK-8280123: C2: Infinite loop in CMoveINode::Ideal during
    IGVN
    + JDK-8280401: [sspi] gss_accept_sec_context leaves
    output_token uninitialized
    + JDK-8280476: [macOS] : hotspot arm64 bug exposed by latest
    clang
    + JDK-8280543: Update the "java" and "jcmd" tool specification
    for CDS
    + JDK-8280593: [PPC64, S390] redundant allocation of
    MacroAssembler in StubGenerator ctor
    + JDK-8280600: C2: assert(!had_error) failed: bad dominance
    + JDK-8280684: JfrRecorderService failes with
    guarantee(num_written &gt; 0) when no space left on device.
    + JDK-8280799: С2: assert(false) failed: cyclic dependency
    prevents range check elimination
    + JDK-8280867: Cpuid1Ecx feature parsing is incorrect for AMD
    CPUs
    + JDK-8280901: MethodHandle::linkToNative stub is missing w/
  - Xint
    + JDK-8280940: gtest os.release_multi_mappings_vm is racy
    + JDK-8280941: os::print_memory_mappings() prints segment
    preceeding the inclusion range
    + JDK-8280956: Re-examine copyright headers on files in
    src/java.desktop/macosx/native/libawt_lwawt/awt/a11y
    + JDK-8280964: [Linux aarch64] : drawImage dithers
    TYPE_BYTE_INDEXED images incorrectly
    + JDK-8281043: Intrinsify recursive ObjectMonitor locking for
    PPC64
    + JDK-8281168: Micro-optimize VarForm.getMemberName for
    interpreter
    + JDK-8281262: Windows builds in different directories are not
    fully reproducible
    + JDK-8281266: [JVMCI] MetaUtil.toInternalName() doesn't handle
    hidden classes correctly
    + JDK-8281274: deal with ActiveProcessorCount in
    os::Linux::print_container_info
    + JDK-8281275: Upgrading from 8 to 11 no longer accepts '/' as
    filepath separator in gc paths
    + JDK-8281318: Improve jfr/event/allocation tests reliability
    + JDK-8281338: NSAccessibilityPressAction action for tree node
    and NSAccessibilityShowMenuAcgtion action not working
    + JDK-8281450: Remove unnecessary operator new and delete from
    ObjectMonitor
    + JDK-8281522: Rename ADLC classes which have the same name as
    hotspot variants
    + JDK-8281544: assert(VM_Version::supports_avx512bw()) failed
    for Tests jdk/incubator/vector/
    + JDK-8281615: Deadlock caused by jdwp agent
    + JDK-8281638: jfr/event/allocation tests fail with release VMs
    after JDK-8281318 due to lack of -XX:+UnlockDiagnosticVMOptions
    + JDK-8281771: Crash in
    java_lang_invoke_MethodType::print_signature
    + JDK-8281811: assert(_base == Tuple) failed: Not a Tuple after
    JDK-8280799
    + JDK-8281822: Test failures on non-DTrace builds due to
    incomplete DTrace* flags handling
    + JDK-8282008: Incorrect handling of quoted arguments in
    ProcessBuilder
    + JDK-8282045: When loop strip mining fails, safepoints are
    removed from loop anyway
    + JDK-8282142: [TestCase] compiler/inlining/
    /ResolvedClassTest.java will fail when
  - -with-jvm-features=-compiler1
    + JDK-8282170: JVMTI SetBreakpoint metaspace allocation test
    + JDK-8282172: CompileBroker::log_metaspace_failure is called
    from non-Java/compiler threads
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8282231: x86-32: runtime call to SharedRuntime::ldiv
    corrupts registers
    + JDK-8282293: Domain value for system property
    jdk.https.negotiate.cbt should be case-insensitive
    + JDK-8282295: SymbolPropertyEntry::set_method_type fails with
    assert
    + JDK-8282312: Minor corrections to evbroadcasti32x4 intrinsic
    on x86
    + JDK-8282345: handle latest VS2022 in abstract_vm_version
    + JDK-8282382: Report glibc malloc tunables in error reports
    + JDK-8282422: JTable.print() failed with
    UnsupportedCharsetException on AIX ko_KR locale
    + JDK-8282444: Module finder incorrectly assumes default file
    system path-separator character
    + JDK-8282499: Bump update version for OpenJDK: jdk-17.0.4
    + JDK-8282509: [exploded image] ResolvedClassTest fails with
    similar output
    + JDK-8282551: Properly initialize L32X64MixRandom state
    + JDK-8282583: Update BCEL md to include the copyright notice
    + JDK-8282590: C2: assert(addp-&gt;is_AddP() &amp;&amp; addp-&gt;outcnt() &gt;
    0) failed: Don't process dead nodes
    + JDK-8282592: C2: assert(false) failed: graph should be
    schedulable
    + JDK-8282628: Potential memory leak in
    sun.font.FontConfigManager.getFontConfig()
    + JDK-8282874: Bad performance on gather/scatter API caused by
    different IntSpecies of indexMap
    + JDK-8282887: Potential memory leak in sun.util.locale.provider
    .HostLocaleProviderAdapterImpl.getNumberPattern() on Windows
    + JDK-8282929: Localized monetary symbols are not reflected in
    'toLocalizedPattern' return value
    + JDK-8283017: GHA: Workflows break with update release versions
    + JDK-8283187: C2: loop candidate for superword not always
    unrolled fully if superword fails
    + JDK-8283217: Leak FcObjectSet in getFontConfigLocations() in
    fontpath.c
    + JDK-8283249: CompressedClassPointers.java fails on ppc with
    'Narrow klass shift: 0' missing
    + JDK-8283279: [Testbug] Improve TestGetSwapSpaceSize
    + JDK-8283315: jrt-fs.jar not always deterministically built
    + JDK-8283323: libharfbuzz optimization level results in
    extreme build times
    + JDK-8283347: [macos] Bad JNI lookup accessibilityHitTest is
    shown when Screen magnifier is enabled
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8283408: Fix a C2 crash when filling arrays with unsafe
    + JDK-8283422: Create a new test for JDK-8254790
    + JDK-8283451: C2: assert(_base == Long) failed: Not a Long
    + JDK-8283469: Don't use memset to initialize members in
    FileMapInfo and fix memory leak
    + JDK-8283497: [windows] print TMP and TEMP in hs_err and
    VM.info
    + JDK-8283641: Large value for CompileThresholdScaling causes
    assert
    + JDK-8283725: Launching java with
    "-Xlog:gc*=trace,safepoint*=trace,class*=trace" crashes the
    JVM
    + JDK-8283834: Unmappable character for US-ASCII encoding in
    TestPredicateInputBelowLoopPredicate
    + JDK-8284023: java.sun.awt.X11GraphicsDevice
    .getDoubleBufferVisuals() leaks XdbeScreenVisualInfo
    + JDK-8284033: Leak XVisualInfo in getAllConfigs in
    awt_GraphicsEnv.c
    + JDK-8284094: Memory leak in invoker_completeInvokeRequest()
    + JDK-8284369: TestFailedAllocationBadGraph fails with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284437: Building from different users/workspace is not
    always deterministic
    + JDK-8284458: CodeHeapState::aggregate() leaks blob_name
    + JDK-8284507: GHA: Only check test results if testing was not
    skipped
    + JDK-8284532: Memory leak in BitSet::BitMapFragmentTable in
    JFR leak profiler
    + JDK-8284549: JFR: FieldTable leaks FieldInfoTable member
    + JDK-8284603: [17u] Update Boot JDK used in GHA to 17.0.2
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8284661: Reproducible assembly builds without relative
    linking
    + JDK-8284754: print more interesting env variables in hs_err
    and VM.info
    + JDK-8284758: [linux] improve print_container_info
    + JDK-8284848: C2: Compiler blackhole arguments should be
    treated as globally escaping
    + JDK-8284866: Add test to JDK-8273056
    + JDK-8284884: Replace polling with waiting in
    javax/swing/text/html/parser/Parser/8078268/bug8078268.java
    + JDK-8284992: Fix misleading Vector API doc for LSHR operator
    + JDK-8285342: Zero build failure with clang due to values not
    handled in switch
    + JDK-8285394: Compiler blackholes can be eliminated due to
    stale ciMethod::intrinsic_id()
    + JDK-8285397: JNI exception pending in CUPSfuncs.c:250
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285515: (dc) DatagramChannel.disconnect fails with
    "Invalid argument" on macOS 12.4
    + JDK-8285523: Improve test
    java/io/FileOutputStream/OpenNUL.java
    + JDK-8285686: Update FreeType to 2.12.0
    + JDK-8285726: [11u, 17u] Unify fix for JDK-8284548 with
    version from head
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8285728: Alpine Linux build fails with busybox tar
    + JDK-8285828: runtime/execstack/TestCheckJDK.java fails with
    zipped debug symbols
    + JDK-8285921: serviceability/dcmd/jvmti/AttachFailed/
    /AttachReturnError.java fails on Alpine
    + JDK-8285956: (fs) Excessive default poll interval in
    PollingWatchService
    + JDK-8286013: Incorrect test configurations for
    compiler/stable/TestStableShort.java
    + JDK-8286029: Add classpath exemption to
    globals_vectorApiSupport_***.S.inc
    + JDK-8286198: [linux] Fix process-memory information
    + JDK-8286293: Tests ShortResponseBody and
    ShortResponseBodyWithRetry should use less resources
    + JDK-8286444: javac errors after JDK-8251329 are not helpful
    enough to find root cause
    + JDK-8286594: (zipfs) Mention paths with dot elements in
    ZipException and cleanups
    + JDK-8286601: Mac Aarch: Excessive warnings to be ignored for
    build jdk
    + JDK-8286855: javac error on invalid jar should only print
    filename
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287119: Add Distrust.java to ProblemList
    + JDK-8287162: (zipfs) Performance regression related to
    support for POSIX file permissions
    + JDK-8287336: GHA: Workflows break on patch versions
    + JDK-8287362: FieldAccessWatch testcase failed on AIX platform
    + JDK-8287378: GHA: Update cygwin to fix issues in langtools
    tests on Windows
- Removed patch:
  * JDK-8282004.patch
    + integrated upstream as JDK-8282231</changelog>
  <changelog author="fstrba@suse.com" date="1663416000">- Package the JAVA_HOME/release files in *-headless package
  * fixes boo#1203476</changelog>
  <changelog author="fstrba@suse.com" date="1666353600">- Update to upstream tag jdk-17.0.5+8 (October 2022 CPU)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286077, CVE-2022-21618, bsc#1204468: Wider MultiByte
    conversions
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526, CVE-2022-21619, bsc#1204473: Improve NTLM support
    + JDK-8286910, CVE-2022-21624, bsc#1204475: Improve JNDI lookups
    + JDK-8286918, CVE-2022-21628, bsc#1204472: Better HttpServer
    service
    + JDK-8287446: Enhance icon presentations
    + JDK-8288508: Enhance ECDSA usage
    + JDK-8289366, CVE-2022-39399, bsc#1204480: Improve HTTP/2
    client usage
    + JDK-8289853: Update HarfBuzz to 4.4.1
    + JDK-8290334: Update FreeType to 2.12.1
  * Other changes
    + JDK-6782021: It is not possible to read local computer
    certificates with the SunMSCAPI provider
    + JDK-6854300: [TEST_BUG] java/awt/event/MouseEvent/
    /SpuriousExitEnter/SpuriousExitEnter_3.java fails in jdk6u14
    &amp; jdk7
    + JDK-7131823: bug in GIFImageReader
    + JDK-8017175: [TESTBUG] javax/swing/JPopupMenu/4634626/
    /bug4634626.java sometimes failed on ac
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8028998: [TEST_BUG] [macosx] java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java failed
    + JDK-8079267: [TEST_BUG] Test java/awt/Frame/MiscUndecorated/
    /RepaintTest.java fails
    + JDK-8159694: HiDPI, Unity, java/awt/dnd/
    /DropTargetEnterExitTest/MissedDragExitTest.java
    + JDK-8169468: NoResizeEventOnDMChangeTest.java fails because
    FS Window didn't receive all resizes!
    + JDK-8172065: javax/swing/JTree/4908142/bug4908142.java The
    selected index should be "aad"
    + JDK-8178969: [TESTBUG] Wrong reporting of
    gc/g1/humongousObjects/TestHeapCounters test.
    + JDK-8211002: test/jdk/java/lang/Math/PowTests.java skips
    testing for non-corner-case values
    + JDK-8212096: javax/net/ssl/ServerName/
    /SSLEngineExplorerMatchedSNI.java failed intermittently due to
    SSLException: Tag mismatch
    + JDK-8223543: [TESTBUG] Regression test java/awt/Graphics2D/
    /DrawString/LCDTextSrcEa.java has issues
    + JDK-8225122: Test AncestorResized.java fails when Windows
    desktop is scaled.
    + JDK-8227651: Tests fail with SSLProtocolException: Input
    record too big
    + JDK-8240903: Add test to check that jmod hashes are
    reproducible
    + JDK-8254318: Remove .hgtags
    + JDK-8255724: [XRender] the BlitRotateClippedArea test fails
    on Linux in the XR pipeline
    + JDK-8256844: Make NMT late-initializable
    + JDK-8257534: misc tests failed with "NoClassDefFoundError:
    Could not initialize class
    java.util.concurrent.ThreadLocalRandom"
    + JDK-8264666: Change implementation of safeAdd/safeMult in the
    LCMSImageLayout class
    + JDK-8264792: The NumberFormat for locale sq_XK formats price
    incorrectly.
    + JDK-8265360: several compiler/whitebox tests fail with
    "private compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled"
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269556: sun/tools/jhsdb/JShellHeapDumpTest.java fails
    with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + JDK-8270090: C2: LCM may prioritize CheckCastPP nodes over
    projections
    + JDK-8270312: Error: Not a test or directory containing tests:
    java/awt/print/PrinterJob/XparColor.java
    + JDK-8271078: jdk/incubator/vector/Float128VectorTests.java
    failed a subtest
    + JDK-8271344: Windows product version issue
    + JDK-8272352: Java launcher can not parse Chinese character
    when system locale is set to UTF-8
    + JDK-8272417: ZGC: fastdebug build crashes when printing
    ClassLoaderData
    + JDK-8272736: [JVMCI] Add API for reading and writing JVMCI
    thread locals
    + JDK-8272815: jpackage --type rpm produces an error: Invalid
    or unsupported type: [null]
    + JDK-8273040: Turning off JpAllowDowngrades (or Upgrades)
    + JDK-8273115: CountedLoopEndNode::stride_con crash in debug
    build with -XX:+TraceLoopOpts
    + JDK-8273506: java Robot API did the 'm' keypress and caused
    /awt/event/KeyEvent/KeyCharTest/KeyCharTest.html is timing out
    on macOS 12
    + JDK-8274434: move os::get_default_process_handle and
    os::dll_lookup to os_posix for POSIX platforms
    + JDK-8274517: java/util/DoubleStreamSums/CompensatedSums.java
    fails with expected [true] but found [false]
    + JDK-8274597: Some of the dnd tests time out and fail
    intermittently
    + JDK-8274856: Failing jpackage tests with fastdebug/release
    build
    + JDK-8275689: [TESTBUG] Use color tolerance only for XRender
    in BlitRotateClippedArea test
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8276546: [IR Framework] Whitelist and ignore
    CompileThreshold
    + JDK-8276837: [macos]: Error when signing the additional
    launcher
    + JDK-8277429: Conflicting jpackage static library name
    + JDK-8277493: [REDO] Quarantined jpackage apps are labeled as
    "damaged"
    + JDK-8278067: Make HttpURLConnection default keep alive
    timeout configurable
    + JDK-8278233: [macos] tools/jpackage tests timeout due to
    /usr/bin/osascript
    + JDK-8278311: Debian packaging doesn't work
    + JDK-8278609: [macos] accessibility frame is misplaced on a
    secondary monitor on macOS
    + JDK-8278612: [macos] test/jdk/java/awt/dnd/
    /RemoveDropTargetCrashTest crashes with VoiceOver on macOS
    + JDK-8279032: compiler/loopopts/
    /TestSkeletonPredicateNegation.java times out with
  - XX:TieredStopAtLevel &lt; 4
    + JDK-8279370: jdk.jpackage/share/native/applauncher/
    /JvmLauncher.cpp fails to build with GCC 6.3.0
    + JDK-8279622: C2: miscompilation of map pattern as a vector
    reduction
    + JDK-8280233: Temporarily disable Unix domain sockets in
    Windows PipeImpl
    + JDK-8280550: SplittableRandom#nextDouble(double,double) can
    return result &gt;= bound
    + JDK-8280696: C2 compilation hits assert(is_dominator(c,
    n_ctrl)) failed
    + JDK-8280863: Update build README to reflect that MSYS2 is
    supported
    + JDK-8280913: Create a regression test for
    JRootPane.setDefaultButton() method
    + JDK-8280944: Enable Unix domain sockets in Windows Selector
    notification mechanism
    + JDK-8280950: RandomGenerator:NextDouble() default behavior
    non conformant after JDK-8280550 fix
    + JDK-8281181: Do not use CPU Shares to compute active
    processor count
    + JDK-8281183: RandomGenerator:NextDouble() default behavior
    partially fixed by JDK-8280950
    + JDK-8281297: TestStressG1Humongous fails with
    guarantee(is_range_uncommitted)
    + JDK-8281535: Create a regression test for JDK-4670051
    + JDK-8281569: Create tests for Frame.setMinimumSize() method
    + JDK-8281628: KeyAgreement : generateSecret intermittently not
    resetting
    + JDK-8281738: Create a regression test for checking the
    'Space' key activation of focused Button
    + JDK-8281745: Create a regression test for JDK-4514331
    + JDK-8281988: Create a regression test for JDK-4618767
    + JDK-8282007: Assorted enhancements to jpackage testing
    framework
    + JDK-8282046: Create a regression test for JDK-8000326
    + JDK-8282214: Upgrade JQuery to version 3.6.0
    + JDK-8282234: Create a regression test for JDK-4532513
    + JDK-8282280: Update Xerces to Version 2.12.2
    + JDK-8282306: os::is_first_C_frame(frame*) crashes on invalid
    link access
    + JDK-8282343: Create a regression test for JDK-4518432
    + JDK-8282351: jpackage does not work if class file has `$$` in
    the name on windows
    + JDK-8282407: Missing ')' in MacResources.properties
    + JDK-8282467: add extra diagnostics for JDK-8268184
    + JDK-8282477: [x86, aarch64] vmassert(_last_Java_pc == NULL,
    "already walkable"); fails with async profiler
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8282548: Create a regression test for JDK-4330998
    + JDK-8282555: Missing memory edge when spilling MoveF2I,
    MoveD2L etc
    + JDK-8282640: Create a test for JDK-4740761
    + JDK-8282778: Create a regression test for JDK-4699544
    + JDK-8282789: Create a regression test for the JTree usecase
    of JDK-4618767
    + JDK-8282860: Write a regression test for JDK-4164779
    + JDK-8282933: Create a test for JDK-4529616
    + JDK-8282936: Write a regression test for JDK-4615365
    + JDK-8282937: Write a regression test for JDK-4820080
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283015: Create a test for JDK-4715496
    + JDK-8283087: Create a test or JDK-4715503
    + JDK-8283245: Create a test for JDK-4670319
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283441: C2: segmentation fault in
    ciMethodBlocks::make_block_at(int)
    + JDK-8283457: [macos] libpng build failures with Xcode13.3
    + JDK-8283493: Create an automated regression test for RFE
    4231298
    + JDK-8283507: Create a regression test for RFE 4287690
    + JDK-8283562: JDK-8282306 breaks gtests on zero
    + JDK-8283597: [REDO] Invalid generic signature for redefined
    classes
    + JDK-8283621: Write a regression test for CCC4400728
    + JDK-8283623: Create an automated regression test for
    JDK-4525475
    + JDK-8283624: Create an automated regression test for
    RFE-4390885
    + JDK-8283712: Create a manual test framework class
    + JDK-8283723: Update Visual Studio 2022 to version 17.1.0 for
    Oracle builds on Windows
    + JDK-8283803: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/PrintGlyphVectorTest.java and fix test
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8283911: DEFAULT_PROMOTED_VERSION_PRE not reset to 'ea'
    for jdk-17.0.4
    + JDK-8284014: Menu items with submenus in JPopupMenu are not
    spoken on macOS
    + JDK-8284067: jpackage'd launcher reports non-zero exit codes
    with error prompt
    + JDK-8284077: Create an automated test for JDK-4170173
    + JDK-8284294: Create an automated regression test for RFE
    4138746
    + JDK-8284358: Unreachable loop is not removed from C2 IR,
    leading to a broken graph
    + JDK-8284367: JQuery UI upgrade from 1.12.1 to 1.13.1
    + JDK-8284521: Write an automated regression test for RFE
    4371575
    + JDK-8284535: Fix PrintLatinCJKTest.java test that is failing
    with Parse Exception
    + JDK-8284675: "jpackage.exe" creates application launcher
    without Windows Application Manifest
    + JDK-8284680: sun.font.FontConfigManager.getFontConfig() leaks
    charset
    + JDK-8284686: Interval of &lt; 1 ms disables ExecutionSample
    events
    + JDK-8284694: Avoid evaluating SSLAlgorithmConstraints twice
    + JDK-8284883: JVM crash: guarantee(sect-&gt;end() &lt;=
    sect-&gt;limit()) failed: sanity on AVX512
    + JDK-8284898: Enhance PassFailJFrame
    + JDK-8284944: assert(cnt++ &lt; 40) failed: infinite cycle in
    loop optimization
    + JDK-8284950: CgroupV1 detection code should consider
    memory.swappiness
    + JDK-8284956: Potential leak awtImageData/color_data when
    initializes X11GraphicsEnvironment
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8285081: Improve XPath operators count accuracy
    + JDK-8285097: Duplicate XML keys in XPATHErrorResources.java
    and XSLTErrorResources.java
    + JDK-8285301: C2: assert(!requires_atomic_access) failed:
    can't ensure atomicity
    + JDK-8285380: Fix typos in security
    + JDK-8285398: Cache the results of constraint checks
    + JDK-8285617: Fix java/awt/print/PrinterJob/ImagePrinting/
    /PrintARGBImage.java manual test
    + JDK-8285693: Create an automated test for JDK-4702199
    + JDK-8285696: AlgorithmConstraints:permits not throwing
    IllegalArgumentException when 'alg'  is null
    + JDK-8285730: unify _WIN32_WINNT settings
    + JDK-8285820: C2: LCM prioritizes locally dependent CreateEx
    nodes over projections after 8270090
    + JDK-8285923: [REDO] JDK-8285802 AArch64: Consistently handle
    offsets in MacroAssembler as 64-bit quantities
    + JDK-8286114: [test] show real exception in bomb call in
    sun/rmi/runtime/Log/checkLogging/CheckLogging.java
    + JDK-8286122: [macos]: App bundle cannot upload to Mac App
    Store due to info.plist embedded in java exe
    + JDK-8286177: C2: "failed: non-reduction loop contains
    reduction nodes" assert failure
    + JDK-8286211: Update PCSC-Lite for Suse Linux to 1.9.5
    + JDK-8286266: [macos] Voice over moving JTable column to be
    the first column JVM crashes
    + JDK-8286277: CDS VerifyError when calling clone() on object
    array
    + JDK-8286314: Trampoline not created for far runtime targets
    outside small CodeCache
    + JDK-8286429: jpackageapplauncher build fails intermittently
    in Tier[45]
    + JDK-8286573: Remove the unnecessary method
    Attr#attribTopLevel and its usage
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8286625: C2 fails with assert(!n-&gt;is_Store() &amp;&amp;
    !n-&gt;is_LoadStore()) failed: no node with a side effect
    + JDK-8286638: C2: CmpU needs to do more precise over/underflow
    analysis
    + JDK-8286869: unify os::dir_is_empty across posix platforms
    + JDK-8286870: Memory leak with RepeatCompilation
    + JDK-8287016: Bump update version for OpenJDK: jdk-17.0.5
    + JDK-8287073: NPE from CgroupV2Subsystem.getInstance()
    + JDK-8287091: aarch64 : guarantee(val &lt; (1ULL &lt;&lt; nbits))
    failed: Field too big for insn
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287113: JFR: Periodic task thread uses period for method
    sampling events
    + JDK-8287125: [macos] Multiple jpackage tests fail/timeout on
    same host
    + JDK-8287202: GHA: Add macOS aarch64 to the list of default
    platforms for workflow_dispatch event
    + JDK-8287223: C1: Inlining attempt through MH::invokeBasic()
    with null receiver
    + JDK-8287366: Improve test failure reporting in GHA
    + JDK-8287396: LIR_Opr::vreg_number() and data() can return
    negative number
    + JDK-8287432: C2: assert(tn-&gt;in(0) != __null) failed: must
    have live top node
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287663: Add a regression test for JDK-8287073
    + JDK-8287672: jtreg test com/sun/jndi/ldap/
    /LdapPoolTimeoutTest.java fails intermittently in nightly run
    + JDK-8287724: Fix various issues with msys2
    + JDK-8287735: Provide separate event category for dll
    operations
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8287824: The MTPerLineTransformValidation tests has a
    typo in the @run tag
    + JDK-8287895: Some langtools tests fail on msys2
    + JDK-8287896: PropertiesTest.sh fail on msys2
    + JDK-8287902: UnreadableRB case in MissingResourceCauseTest is
    not working reliably on Windows
    + JDK-8287906: Rewrite of GitHub Actions (GHA) sanity tests
    + JDK-8287917: System.loadLibrary does not work on Big Sur if
    JDK is built with macOS SDK 10.15 and earlier
    + JDK-8288000: compiler/loopopts/TestOverUnrolling2.java fails
    with release VMs
    + JDK-8288003: log events for os::dll_unload
    + JDK-8288303: C1: Miscompilation due to broken
    Class.getModifiers intrinsic
    + JDK-8288360: CI: ciInstanceKlass::implementor() is not
    consistent for well-known classes
    + JDK-8288399: MacOS debug symbol files not always
    deterministic in reproducible builds
    + JDK-8288467: remove memory_operand assert for spilled
    instructions
    + JDK-8288499: Restore cancel-in-progress in GHA
    + JDK-8288599: com/sun/management/OperatingSystemMXBean/
    /TestTotalSwap.java: Expected total swap size ... but
    getTotalSwapSpaceSize returned ...
    + JDK-8288754: GCC 12 fails to build zReferenceProcessor.cpp
    + JDK-8288781: C1: LIR_OpVisitState::maxNumberOfOperands too
    small
    + JDK-8288985: P11TlsKeyMaterialGenerator should work with
    ChaCha20-Poly1305
    + JDK-8288992: AArch64: CMN should be handled the same way as
    CMP
    + JDK-8289127: Apache Lucene triggers: DEBUG MESSAGE:
    duplicated predicate failed which is impossible
    + JDK-8289147: unify os::infinite_sleep on posix platforms
    + JDK-8289197: [17u] Push of backport of 8286177 did not remove
    assertion
    + JDK-8289471: Issue in Initialization of keys in ErrorMsg.java
    and XPATHErrorResources.java
    + JDK-8289477: Memory corruption with CPU_ALLOC, CPU_FREE on
    muslc
    + JDK-8289486: Improve XSLT XPath operators count efficiency
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8289569: [test] java/lang/ProcessBuilder/Basic.java fails
    on Alpine/musl
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8289697: buffer overflow in MTLVertexCache.m:
    MTLVertexCache_AddGlyphQuad
    + JDK-8289799: Build warning in methodData.cpp memset
    zero-length parameter
    + JDK-8289856: [PPC64] SIGSEGV in C2Compiler::init_c2_runtime()
    after JDK-8289060
    + JDK-8289910: unify os::message_box across posix platforms
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8290004: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8290020: Deadlock in leakprofiler::emit_events during
    shutdown
    + JDK-8290082: [PPC64] ZGC C2 load barrier stub needs to
    preserve vector registers
    + JDK-8290246: test fails "assert(init != __null) failed:
    initialization not found"
    + JDK-8290417: CDS cannot archive lamda proxy with
    useImplMethodHandle
    + JDK-8290456: remove os::print_statistics()
    + JDK-8291595: [17u] Delete files missed in backport of 8269039
    + JDK-8291633: Build failures with GCC 11, Alpine 3 due to
    incompatible casts from nullptr
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8295056: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.5
- Modified patch:
  * fips.patch
    + sync with newest RedHat version</changelog>
  <changelog author="javier@opensuse.org" date="1667304000">- Fix jconsole.desktop icon</changelog>
  <changelog author="fstrba@suse.com" date="1670500800">- Removed patch:
  * system-crypto-policy.patch
    + folded into the fips.patch, since they are patching the same
    places
- Modified patches:
  * fips.patch
    + revert to the version used with 17.0.4.0, since the newest
    changes are buggy (bsc#1205916)
    + fold in the system-crypto-policy.patch
  * nss-security-provider.patch
    + apply after the fips.patch and thus rediff the hunk to changed
    context.</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to upstream tag jdk-17.0.6+10 (January 2023 CPU)
  * CVEs
    + CVE-2023-21835, bsc#1207246
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8286070: Improve UTF8 representation
    + JDK-8286496: Improve Thread labels
    + JDK-8287411: Enhance DTLS performance
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * Other changes
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7188098: TEST_BUG: closed/javax/sound/midi/Synthesizer/
    /Receiver/bug6186488.java fails
    + JDK-8022403: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails
    + JDK-8029633: Raw inner class constructor ref should not
    perform diamond inference
    + JDK-8030121: java/awt/dnd/MissingDragExitEventTest/
    /MissingDragExitEventTest.java fails
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8169187: [macosx] Aqua: java/awt/image/multiresolution/
    /MultiresolutionIconTest.java
    + JDK-8178698: javax/sound/midi/Sequencer/MetaCallback.java
    failed with timeout
    + JDK-8202836: [macosx] test
    java/awt/Graphics/TextAAHintsTest.java fails
    + JDK-8210558: serviceability/sa/TestJhsdbJstackLock.java fails
    to find '^\s+- waiting to
    lock &lt;0x[0-9a-f]+&gt; \(a java\.lang\.Class ...'
    + JDK-8222323: ChildAlwaysOnTopTest.java fails with
    "RuntimeException: Failed to unset alwaysOnTop"
    + JDK-8233557: [TESTBUG] DoubleClickTitleBarTest.java fails on
    macOs
    + JDK-8233558: [TESTBUG] WindowOwnedByEmbeddedFrameTest.java
    fails on macos
    + JDK-8233648: [TESTBUG] DefaultMenuBarTest.java failing on
    macos
    + JDK-8244670: convert clhsdb "whatis" command from javascript
    to java
    + JDK-8251466: test/java/io/File/GetXSpace.java fails on
    Windows with mapped network drives.
    + JDK-8255439: System Tray icons get corrupted when Windows
    scaling changes
    + JDK-8256811: Delayed/missed jdwp class unloading events
    + JDK-8257722: Improve "keytool -printcert -jarfile" output
    + JDK-8262721: Add Tests to verify single iteration loops are
    properly optimized
    + JDK-8265489: Stress test times out because of long
    ObjectSynchronizer::monitors_iterate(...) operation
    + JDK-8266082: AssertionError in Annotate.fromAnnotations with
  - Xdoclint
    + JDK-8266519: Cleanup resolve() leftovers from BarrierSet et al
    + JDK-8267138: Stray suffix when starting gtests via
    GTestWrapper.java
    + JDK-8268033: compiler/intrinsics/bmi/verifycode/
    /BzhiTestI2L.java fails with "fatal error: Not compilable at
    tier 3: CodeBuffer overflow"
    + JDK-8268276: Base64 Decoding optimization for x86 using
    AVX-512
    + JDK-8268297: jdk/jfr/api/consumer/streaming/
    /TestLatestEvent.java times out
    + JDK-8268779: ZGC: runtime/InternalApi/
    /ThreadCpuTimesDeadlock.java#id1 failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8269029: compiler/codegen/TestCharVect2.java fails for
    client VMs
    + JDK-8269404: Base64 Encoding optimization enhancements for
    x86 using AVX-512
    + JDK-8269571: NMT should print total malloc bytes and
    invocation count
    + JDK-8269743: test/hotspot/jtreg/vmTestbase/vm/mlvm/meth/
    /stress/jni/nativeAndMH/Test.java crash with small heap
    (-Xmx50m)
    + JDK-8270086: ARM32-softfp: Do not load CONSTANT_double using
    the condy helper methods in the interpreter
    + JDK-8270155: ARM32: Improve register dump in hs_err
    + JDK-8270609: [TESTBUG] java/awt/print/Dialog/DialogCopies.java
    does not show instruction
    + JDK-8270848: Redundant unsafe opmask register allocation in
    some instruction patterns.
    + JDK-8270947: AArch64: C1: use zero_words to initialize all
    objects
    + JDK-8271015: Split cds/SharedBaseAddress.java test into
    smaller parts
    + JDK-8271834: TestStringDeduplicationAgeThreshold intermittent
    failures on Shenandoah
    + JDK-8271956: AArch64: C1 build failed after JDK-8270947
    + JDK-8272094: compiler/codecache/TestStressCodeBuffers.java
    crashes with "failed to allocate space for trampoline"
    + JDK-8272123: Problem list 4 jtreg tests which regularly fail
    on macos-aarch64
    + JDK-8272608: java_lang_System::allow_security_manager()
    doesn't set its initialization flag
    + JDK-8272776: NullPointerException not reported
    + JDK-8272791: java -XX:BlockZeroingLowLimit=1 crashes after
    8270947
    + JDK-8272809: JFR thread sampler SI_KERNEL SEGV in
    metaspace::VirtualSpaceList::contains
    + JDK-8273043: [TEST_BUG] Automate NimbusJTreeSelTextColor.java
    + JDK-8273108: RunThese24H crashes with SEGV in
    markWord::displaced_mark_helper() after JDK-8268276
    + JDK-8273236: keytool does not accurately warn about
    algorithms that are disabled but have additional constraints
    + JDK-8273380: ARM32: Default to {ldrexd,strexd} in
    StubRoutines::atomic_{load|store}_long
    + JDK-8273459: Update code segment alignment to 64 bytes
    + JDK-8273497: building.md should link to both md and html
    + JDK-8273553: sun.security.ssl.SSLEngineImpl.closeInbound also
    has similar error of JDK-8253368
    + JDK-8273578: javax/swing/JMenu/4515762/bug4515762.java fails
    on macOS 12
    + JDK-8273685: Remove jtreg tag manual=yesno for
    java/awt/Graphics/LCDTextAndGraphicsState.java &amp; show test
    instruction
    + JDK-8273880: Zero: Print warnings when unsupported intrinsics
    are enabled
    + JDK-8273881: Metaspace: test repeated deallocations
    + JDK-8274029: Remove jtreg tag manual=yesno for
    java/awt/print/Dialog/DialogOrient.java
    + JDK-8274032: Remove jtreg tag manual=yesno for java/awt/print/
    /PrinterJob/ImagePrinting/ImageTypes.java &amp; show test UI
    + JDK-8274160: java/awt/Window/ShapedAndTranslucentWindows/
    /Common.java delay is too high
    + JDK-8274296: Update or Problem List tests which may fail with
    uiScale=2 on macOS
    + JDK-8274456: Remove jtreg tag manual=yesno
    java/awt/print/PrinterJob/PageDialogTest.java
    + JDK-8274527: Minimal VM build fails after JDK-8273459
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274903: Zero: Support AsyncGetCallTrace
    + JDK-8275170: Some jtreg sound tests should be marked with
    sound keyword
    + JDK-8275234: java/awt/GraphicsDevice/DisplayModes/
    /CycleDMImage.java is entered twice in ProblemList
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275569: Add linux-aarch64 to test-make profiles
    + JDK-8276108: Wrong instruction generation in aarch64 backend
    + JDK-8276904: Optional.toString() is unnecessarily expensive
    + JDK-8277092: TestMetaspaceAllocationMT2.java#ndebug-default
    fails with "RuntimeException: Committed seems high: NNNN
    expected at most MMMM"
    + JDK-8277346: ProblemList 7 serviceability/sa tests on
    macosx-x64
    + JDK-8277351: ProblemList runtime/jni/checked/
    /TestPrimitiveArrayCriticalWithBadParam.java on macosx-x64
    + JDK-8277358: Accelerate CRC32-C
    + JDK-8277411: C2 fast_unlock intrinsic on AArch64 has
    unnecessary ownership check
    + JDK-8277576: ProblemList runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java on macosx-X64
    + JDK-8277577: ProblemList compiler/onSpinWait/
    /TestOnSpinWaitAArch64DefaultFlags.java on linux-aarch64
    + JDK-8277578: ProblemList applications/jcstress/acqrel.java on
    linux-aarch64
    + JDK-8277866: gc/epsilon/TestMemoryMXBeans.java failed with
    wrong initial heap size
    + JDK-8277881: Missing SessionID in TLS1.3 resumption in
    compatibility mode
    + JDK-8277928: Fix compilation on macosx-aarch64 after 8276108
    + JDK-8277970: Test jdk/sun/security/ssl/SSLSessionImpl/
    /NoInvalidateSocketException.java fails with "tag mismatch"
    + JDK-8278826: Print error if Shenandoah flags are empty
    (instead of crashing)
    + JDK-8279066: entries.remove(entry) is useless in
    PKCS12KeyStore
    + JDK-8279398: jdk/jfr/api/recording/time/TestTimeMultiple.java
    failed with "RuntimeException: getStopTime() &gt; afterStop"
    + JDK-8279536: jdk/nio/zipfs/ZipFSOutputStreamTest.java timed
    out
    + JDK-8279662: serviceability/sa/ClhsdbScanOops.java can fail
    due to unexpected GC
    + JDK-8279941: sun/security/pkcs11/Signature/
    /TestDSAKeyLength.java fails when NSS version detection fails
    + JDK-8280016: gc/g1/TestShrinkAuxiliaryData30 test fails on
    large machines
    + JDK-8280124: Reduce branches decoding latin-1 chars from
    UTF-8 encoded bytes
    + JDK-8280234: AArch64 "core" variant does not build after
    JDK-8270947
    + JDK-8280391: NMT: Correct NMT tag on CollectedHeap
    + JDK-8280511: AArch64: Combine shift and negate to a single
    instruction
    + JDK-8280554: resourcehogs/serviceability/sa/
    /ClhsdbRegionDetailsScanOopsForG1.java can fail if GC is
    triggered
    + JDK-8280555: serviceability/sa/TestObjectMonitorIterate.java
    is failing due to ObjectMonitor referencing a null Object
    + JDK-8280872: Reorder code cache segments to improve code
    density
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8280948: Write a regression test for JDK-4659800
    + JDK-8281296: Create a regression test for JDK-4515999
    + JDK-8281744: x86: Use short jumps in
    TIG::set_vtos_entry_points
    + JDK-8282049: AArch64: Use ZR for integer zero immediate
    volatile stores
    + JDK-8282276: Problem list failing two Robot Screen Capture
    tests
    + JDK-8282347: AARCH64: Untaken branch in has_negatives stub
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282402: Create a regression test for JDK-4666101
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282528: AArch64: Incorrect replicate2L_zero rule
    + JDK-8282600: SSLSocketImpl should not use user_canceled
    workaround when not necessary
    + JDK-8282642: vmTestbase/gc/gctests/LoadUnloadGC2/
    /LoadUnloadGC2.java fails intermittently with exit code 1
    + JDK-8282730: LdapLoginModule throw NPE from logout method
    after login failure
    + JDK-8282777: Create a Regression test for JDK-4515031
    + JDK-8282857: Create a regression test for JDK-4702690
    + JDK-8283059: Uninitialized warning in check_code.c with GCC
    11.2
    + JDK-8283199: Linux os::cpu_microcode_revision() stalls cold
    startup
    + JDK-8283298: Make CodeCacheSegmentSize a product flag
    + JDK-8283337: Posix signal handler modification warning
    triggering incorrectly
    + JDK-8283353: compiler/c2/cr6865031/Test.java and
    compiler/runtime/Test6826736.java fails on x86_32
    + JDK-8283383: [macos] a11y : Screen magnifier shows extra
    characters (0) at the end JButton accessibility name
    + JDK-8283999: Update JMH devkit to 1.35
    + JDK-8284533: Improve InterpreterCodelet data footprint
    + JDK-8284681: compiler/c2/aarch64/TestFarJump.java fails with
    "RuntimeException: for CodeHeap &lt; 250MB the far jump is
    expected to be encoded with a single branch instruction"
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284732: FFI_GO_CLOSURES macro not defined but required
    for zero build on Mac OS X
    + JDK-8284752: Zero does not build on Mac OS X due to missing
    os::current_thread_enable_wx implementation
    + JDK-8284771: java/util/zip/CloseInflaterDeflaterTest.java
    failed with "AssertionError: Expected IOException to be
    thrown, but nothing was thrown"
    + JDK-8284892: java/net/httpclient/http2/TLSConnection.java
    fails intermittently
    + JDK-8284980: Test vmTestbase/nsk/stress/except/except010.java
    times out with -Xcomp  -XX:+DeoptimizeALot
    + JDK-8285093: Introduce UTIL_ARG_WITH
    + JDK-8285305: Create an automated test for JDK-4495286
    + JDK-8285373: Create an automated test for JDK-4702233
    + JDK-8285604: closed sun/java2d/GdiRendering/
    /ClipShapeRendering.java failed with "Incorrect color ffeeeeee
    instead of ff0000ff in pixel (100, 100)"
    + JDK-8285612: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/ImagePrinting/ClippedImages.java
    + JDK-8285687: Remove jtreg tag manual=yesno for
    java/awt/print/PrinterJob/PageRangesDlgTest.java
    + JDK-8285698: Create a test to check the focus stealing of
    JPopupMenu from JComboBox
    + JDK-8285794: AsyncGetCallTrace might acquire a lock via
    JavaThread::thread_from_jni_environment
    + JDK-8285836: sun/net/www/http/KeepAliveCache/
    /KeepAliveProperty.java failed with "RuntimeException: Failed
    in server"
    + JDK-8286172: Create an automated test for JDK-4516019
    + JDK-8286263: compiler/c1/TestPinnedIntrinsics.java failed
    with "RuntimeException: testCurrentTimeMillis failed with -3"
    + JDK-8286313: [macos] Voice over reads the boolean value as
    null in the JTable
    + JDK-8286452: The array length of testSmallConstArray should
    be small and const
    + JDK-8286460: Remove dependence on JAR filename in CDS tests
    + JDK-8286551: JDK-8286460 causes tests to fail to compile in
    Tier2
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8286663: Resolve IDE warnings in WTrayIconPeer and
    SystemTray
    + JDK-8286772: java/awt/dnd/DropTargetInInternalFrameTest/
    /DropTargetInInternalFrameTest.html times out and fails in
    Windows
    + JDK-8286872: Refactor add/modify notification icon (TrayIcon)
    + JDK-8287011: Improve container information
    + JDK-8287076: Document.normalizeDocument() produces different
    results
    + JDK-8287349: AArch64: Merge LDR instructions to improve C1
    OSR performance
    + JDK-8287425: Remove unnecessary register push for
    MacroAssembler::check_klass_subtype_slow_path
    + JDK-8287609: macOS: SIGSEGV at [CoreFoundation]
    CFArrayGetCount / sun.font.CFont.getTableBytesNative
    + JDK-8287740: NSAccessibilityShowMenuAction not working for
    text editors
    + JDK-8287826: javax/accessibility/4702233/
    /AccessiblePropertiesTest.java fails to compile
    + JDK-8288132: Update test artifacts in QuoVadis CA interop
    tests
    + JDK-8288302: Shenandoah: SIGSEGV in vm maybe related to jit
    compiling xerces
    + JDK-8288377: [REDO] DST not applying properly with zone id
    offset set with TZ env variable
    + JDK-8288445: AArch64: C2 compilation fails with
    guarantee(!true || (true &amp;&amp; (shift != 0))) failed: impossible
    encoding
    + JDK-8288651: CDS test HelloUnload.java should not use literal
    string as ClassLoader name
    + JDK-8289044: ARM32: missing LIR_Assembler::cmove metadata
    type support
    + JDK-8289146: containers/docker/TestMemoryWithCgroupV1.java
    fails on linux ppc64le machine with missing Memory and Swap
    Limit output
    + JDK-8289257: Some custom loader tests failed due to symbol
    refcount not decremented
    + JDK-8289301: P11Cipher should not throw out of bounds
    exception during padding
    + JDK-8289524: Add JFR JIT restart event
    + JDK-8289559: java/awt/a11y/AccessibleJPopupMenuTest.java test
    fails with java.lang.NullPointerException
    + JDK-8289562: Change bugs.java.com and bugreport.java.com
    URL's to https
    + JDK-8290207: Missing notice in dom.md
    + JDK-8290209: jcup.md missing additional text
    + JDK-8290374: Shenandoah: Remove inaccurate comment on
    SBS::load_reference_barrier()
    + JDK-8290451: Incorrect result when switching to C2 OSR
    compilation from C1
    + JDK-8290529: C2: assert(BoolTest(btest).is_canonical())
    failure
    + JDK-8290532: Adjust PKCS11Exception and handle more PKCS11
    error codes
    + JDK-8290687: serviceability/sa/TestClassDump.java could leave
    files owned by root on macOS
    + JDK-8290705: StringConcat::validate_mem_flow asserts with
    "unexpected user: StoreI"
    + JDK-8290711: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + JDK-8290781: Segfault at
    PhaseIdealLoop::clone_loop_handle_data_uses
    + JDK-8290839: jdk/jfr/event/compiler/TestJitRestart.java
    failed with "RuntimeException: No JIT restart event found:
    expected true, was false"
    + JDK-8290908: misc tests fail: assert(!thread-&gt;owns_locks())
    failed: must release all locks when leaving VM
    + JDK-8290920: sspi_bridge.dll not built if BUILD_CRYPTO is
    false
    + JDK-8291456: com/sun/jdi/ClassUnloadEventTest.java failed
    with: Wrong number of class unload events: expected 10 got 4
    + JDK-8291459: JVM crash with GenerateOopMap::error_work(char
    const*, __va_list_tag*)
    + JDK-8291599: Assertion in
    PhaseIdealLoop::skeleton_predicate_has_opaque after
    JDK-8289127
    + JDK-8291650: Add delay to ClassUnloadEventTest before exiting
    to give time for JVM to send all events before VMDeath
    + JDK-8291775: C2: assert(r != __null &amp;&amp; r-&gt;is_Region())
    failed: this phi must have a region
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292158: AES-CTR cipher state corruption with AVX-512
    + JDK-8292385: assert(ctrl == kit.control()) failed: Control
    flow was added although the intrinsic bailed out
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8292586: simplify cleanups in NTLMAuthSequence
    getCredentialsHandle
    + JDK-8292682: Code change of JDK-8282730 not updated to
    reflect CSR update
    + JDK-8292695: SIGQUIT and jcmd attaching mechanism does not
    work with signal chaining library
    + JDK-8292778: EncodingSupport_md.c convertUtf8ToPlatformString
    wrong placing of free
    + JDK-8292816: GPL Classpath exception missing from
    assemblyprefix.h
    + JDK-8292866:
    Java_sun_awt_shell_Win32ShellFolder2_getLinkLocation check
    MultiByteToWideChar return value for failures
    + JDK-8292879: com/sun/jdi/ClassUnloadEventTest.java failed due
    to classes not unloading
    + JDK-8292880: Improve debuggee logging for
    com/sun/jdi/ClassUnloadEventTest.java
    + JDK-8292888: Bump update version for OpenJDK: jdk-17.0.6
    + JDK-8292899: CustomTzIDCheckDST.java testcase failed on AIX
    platform
    + JDK-8292903: enhance round_up_power_of_2 assertion output
    + JDK-8293010: JDI ObjectReference/referringObjects/
    /referringObjects001 fails:
    assert(env-&gt;is_enabled(JVMTI_EVENT_OBJECT_FREE)) failed:
    checking
    + JDK-8293044: C1: Missing access check on non-accessible class
    + JDK-8293232: Fix race condition in pkcs11 SessionManager
    + JDK-8293319: [C2 cleanup] Remove unused other_path arg in
    Parse::adjust_map_after_if
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293489: Accept CAs with BasicConstraints without
    pathLenConstraint
    + JDK-8293535: jdk/javadoc/doclet/testJavaFX/
    /TestJavaFxMode.java fail with jfx
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293550: Optionally add get-task-allow entitlement to
    macos binaries
    + JDK-8293578: Duplicate ldc generated by javac
    + JDK-8293657: sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java#id1 failed with "SSLHandshakeException:
    Remote host terminated the handshake"
    + JDK-8293659: Improve UnsatisfiedLinkError error message to
    include dlopen error details
    + JDK-8293672: Update freetype md file
    + JDK-8293701: jdeps InverseDepsAnalyzer runs into
    NoSuchElementException: No value present
    + JDK-8293808: mscapi destroyKeyContainer enhance
    KeyStoreException: Access is denied exception
    + JDK-8293815: P11PSSSignature.engineUpdate should not print
    debug messages during normal operation
    + JDK-8293816: CI: ciBytecodeStream::get_klass() is not
    consistent
    + JDK-8293826: Closed test fails after JDK-8276108 on aarch64
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8293834: Update CLDR data following tzdata 2022c update
    + JDK-8293891: gc/g1/mixedgc/TestOldGenCollectionUsage.java
    (still) assumes that GCs take 1ms minimum
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293998: [PPC64] JfrGetCallTrace: assert(_pc != nullptr)
    failed: must have PC
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294578: [PPC64] C2: Missing is_oop information when
    using disjoint compressed oops mode
    + JDK-8294740: Add cgroups keyword to TestDockerBasic.java
    + JDK-8294837: unify Windows 2019 version check in os_windows
    and java_props_md
    + JDK-8294840: langtools OptionalDependencyTest.java use
    File.pathSeparator
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295405: Add cause in a couple of IllegalArgumentException
    and InvalidParameterException shown by sun/security/pkcs11
    tests
    + JDK-8295412: support latest VS2022 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8295419: JFR: Change name of jdk.JitRestart
    + JDK-8295429: Update harfbuzz md file
    + JDK-8295469: S390X: Optimized builds are broken
    + JDK-8295554: Move the "sizecalc.h" to the correct location
    + JDK-8295641: Fix DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295872: [PPC64] JfrGetCallTrace: Need pc == nullptr
    check before frame constructor
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8296083: javax/swing/JTree/6263446/bug6263446.java fails
    intermittently on a VM
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296496: Overzealous check in sizecalc.h prevents large
    memory allocation
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296733: JFR: File Read event for
    RandomAccessFile::write(byte[]) is incorrect
    + JDK-8296945: PublicMethodsTest is slow due to dependency
    verification with debug builds
    + JDK-8296956: [JVMCI] HotSpotResolvedJavaFieldImpl.getIndex
    returns wrong value
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8296958: [JVMCI] add API for retrieving ConstantValue
    attributes
    + JDK-8296960: [JVMCI] list
    HotSpotConstantPool.loadReferencedType to ConstantPool
    + JDK-8296961: [JVMCI] Access to j.l.r.Method/Constructor/Field
    for ResolvedJavaMethod/ResolvedJavaField
    + JDK-8296967: [JVMCI] rationalize relationship between
    getCodeSize and getCode in ResolvedJavaMethod
    + JDK-8297147: UnexpectedSourceImageSize test times out on slow
    machines when fastdebug is used
    + JDK-8297153: sun/java2d/DirectX/OnScreenRenderingResizeTest/
    /OnScreenRenderingResizeTest.java fails again
    + JDK-8297241: Update sun/java2d/DirectX/
    /OnScreenRenderingResizeTest/OnScreenRenderingResizeTest.java
    + JDK-8297309: Memory leak in ShenandoahFullGC
    + JDK-8297481: Create a regression test for JDK-4424517
    + JDK-8297530: java.lang.IllegalArgumentException: Negative
    length on strings concatenation
    + JDK-8297590: [TESTBUG] HotSpotResolvedJavaFieldTest does not
    run
    + JDK-8297656: AArch64: Enable AES/GCM Intrinsics
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299392: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.6
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
- Modified patch:
  * fips.patch
    + update to newest level
- Removed patch:
  * fix_armv6_build.patch
    + does not apply and at least a part of the fix is in this
    version</changelog>
  <changelog author="fstrba@suse.com" date="1676030400">- Modified patch:
  * fips.patch
    + avoid calling C_GetInfo() too early, before cryptoki is
    initialized (bsc#1205916)</changelog>
  <changelog author="fstrba@suse.com" date="1676635200">- Remove the accessibility sub-package, since it was never really
  working and creates another problems (bsc#1206549). It can
  eventually be built as standalone if needed
- Removed patches:
  * jaw-jdk10.patch
  * jaw-misc.patch
  * jaw-nogtk.patch
    + not needed after the removal of the accessibility sub-package</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU)
  * Security fixes:
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474, CVE-2023-21930, bsc#1210628: Better AES support
    + JDK-8295304, CVE-2023-21938, bsc#1210632: Runtime support
    improvements
    + JDK-8296676, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296684, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296692, CVE-2023-21937, bsc#1210631: Improve String
    platform support
    + JDK-8296832, CVE-2023-21939, bsc#1210634: Improve Swing
    platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191, CVE-2023-21954, bsc#1210635: Enhance object
    reclamation process
    + JDK-8298310, CVE-2023-21967, bsc#1210636: Enhance TLS session
    negotiation
    + JDK-8298667, CVE-2023-21968, bsc#1210637: Improved path
    handling
    + JDK-8299129: Enhance NameService lookups
  * Fixes:
    + JDK-6528710: sRGB-ColorSpace to sRGB-ColorSpace Conversion
    + JDK-6779701: Wrong defect ID in the code of test
    LocalRMIServerSocketFactoryTest.java
    + JDK-8008243: Zero: Implement fast bytecodes
    + JDK-8048190: NoClassDefFoundError omits original
    ExceptionInInitializerError
    + JDK-8065097: [macosx] javax/swing/Popup/
    /TaskbarPositionTest.java fails because Popup is one pixel off
    + JDK-8144030: [macosx] test java/awt/Frame/
    /ShapeNotSetSometimes/ShapeNotSetSometimes.java fails (again)
    + JDK-8155246: Throw error if default java.security file is
    missing
    + JDK-8186765: Speed up test sun/net/www/protocol/https/
    /HttpsClient/ProxyAuthTest.java
    + JDK-8192931: Regression test java/awt/font/TextLayout/
    /CombiningPerf.java fails
    + JDK-8195809: [TESTBUG] jps and jcmd -l support for
    containers is not tested
    + JDK-8208077: File.listRoots performance degradation
    + JDK-8209935: Test to cover CodeSource.getCodeSigners()
    + JDK-8210927: JDB tests do not update source path after
    doing a redefine class
    + JDK-8212961: [TESTBUG] vmTestbase/nsk/stress/jni/
    native code cleanup
    + JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java
    fails
    + JDK-8223783: sun/net/www/http/HttpClient/MultiThreadTest.java
    sometimes detect threads+1 connections
    + JDK-8230374: maxOutputSize, instead of javatest.maxOutputSize,
    should be used in TEST.properties
    + JDK-8231491: JDI tc02x004 failed again due to wrong # of
    breakpoints
    + JDK-8235297: sun/security/ssl/SSLSessionImpl/
    /ResumptionUpdateBoundValues.java fails intermittent
    + JDK-8242115: C2 SATB barriers are not safepoint-safe
    + JDK-8244669: convert clhsdb "mem" command from javascript to
    java
    + JDK-8245654: Add Certigna Root CA
    + JDK-8251177: [macosx] The text "big" is truncated in
    JTabbedPane
    + JDK-8254267: javax/xml/crypto/dsig/LogParameters.java
    failed with "RuntimeException: Unexpected log output:"
    + JDK-8258512: serviceability/sa/TestJmapCore.java timed out on
    macOS 10.13.6
    + JDK-8262386: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java timed out
    + JDK-8266974: duplicate property key in java.sql.rowset
    resource bundle
    + JDK-8267038: Update IANA Language Subtag Registry to
    Version 2022-03-02
    + JDK-8270156: Add "randomness" and "stress" keys to
    JTreg tests which use StressGCM, StressLCM and/or StressIGVN
    + JDK-8270476: Make floating-point test infrastructure
    more lambda and method reference friendly
    + JDK-8271471: [IR Framework] Rare occurrence of "&lt;!--
    safepoint while printing --&gt;" in PrintIdeal/PrintOptoAssembly
    can let tests fail
    + JDK-8271838: AmazonCA.java interop test fails
    + JDK-8272702: Resolving URI relative path with no / may
    lead to incorrect toString
    + JDK-8272985: Reference discovery is confused about
    atomicity and degree of parallelism
    + JDK-8273154: Provide a JavadocTester method for
    non-overlapping, unordered output matching
    + JDK-8273410: IR verification framework fails with
    "Should find method name in validIrRulesMap"
    + JDK-8274911: testlibrary_tests/ir_framework/tests/
    /TestIRMatching.java fails with "java.lang.RuntimeException:
    Should have thrown exception"
    + JDK-8275173: testlibrary_tests/ir_framework/tests/
    /TestCheckedTests.java fails after JDK-8274911
    + JDK-8275320: NMT should perform buffer overrun checks
    + JDK-8275301: Unify C-heap buffer overrun checks into NMT
    + JDK-8275582: Don't purge metaspace mapping lists
    + JDK-8275704: Metaspace::contains() should be threadsafe
    + JDK-8275843: Random crashes while the UI code is
    executed
    + JDK-8276064: CheckCastPP with raw oop input floats
    below a safepoint
    + JDK-8276086: Increase size of metaspace mappings
    + JDK-8277485: Zero: Fix _fast_{i,f}access_0 bytecodes
    handling
    + JDK-8277822: Remove debug-only heap overrun checks in
    os::malloc and friends
    + JDK-8277946: NMT: Remove VM.native_memory shutdown jcmd
    command option
    + JDK-8277990: NMT: Remove NMT shutdown capability
    + JDK-8278961: Enable debug logging in java/net/
    /DatagramSocket/SendDatagramToBadAddress.java
    + JDK-8279024: Remove javascript references from
    clhsdb.html
    + JDK-8279119: src/jdk.hotspot.agent/doc/index.html file
    contains references to scripts that no longer exist
    + JDK-8279351: [TESTBUG] SADebugDTest.java does not
    handle "Address already in use" error
    + JDK-8279614: The left line of the TitledBorder is not
    painted on 150 scale factor
    + JDK-8280007: Enable Neoverse N1 optimizations for Arm
    Neoverse V1 &amp; N2
    + JDK-8280048: Missing comma in copyright header
    + JDK-8280132: Incorrect comparator com.sun.beans.introspect
    .MethodInfo.MethodOrder
    + JDK-8280166: Extend java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java test cases
    + JDK-8280553: resourcehogs/serviceability/sa/
    /TestHeapDumpForLargeArray.java can fail if GC occurs
    + JDK-8280703: CipherCore.doFinal(...) causes potentially
    massive byte[] allocations during decryption
    + JDK-8280784: VM_Cleanup unnecessarily processes all
    thread oops
    + JDK-8280868: LineBodyHandlerTest.java creates and
    discards too many clients
    + JDK-8280889: java/lang/instrument/
    /GetObjectSizeIntrinsicsTest.java fails with
  - XX:-UseCompressedOops
    + JDK-8280896: java/nio/file/Files/probeContentType/
    /Basic.java fails on Windows 11
    + JDK-8281122: [IR Framework] Cleanup IR matching code in
    preparation for JDK-8280378
    + JDK-8281170: Test jdk/tools/jpackage/windows/
    /WinInstallerIconTest always fails on Windows 11
    + JDK-8282036: Change java/util/zip/ZipFile/DeleteTempJar.java
    to stop HttpServer cleanly in case of exceptions
    + JDK-8282143: Objects.requireNonNull should be
    ForceInline
    + JDK-8282577: ICC_Profile.setData(int, byte[])
    invalidates the profile
    + JDK-8282771: Create test case for JDK-8262981
    + JDK-8282958: Rendering Issues with Borders on Windows
    High-DPI systems
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8283717: vmTestbase/nsk/jdi/ThreadStartEvent/thread/
    /thread001 failed due to SocketTimeoutException
    + JDK-8283719: java/util/logging/CheckZombieLockTest.java
    failing intermittently
    + JDK-8283870: jdeprscan --help causes an exception when
    the locale is ja, zh_CN or de
    + JDK-8284115: [IR Framework] Compilation is not found due to
    rare safepoint while dumping PrintIdeal/PrintOptoAssembly
    + JDK-8284165: Add pid to process reaper thread name
    + JDK-8284524: Create an automated test for JDK-4422362
    + JDK-8284726: Print active locale settings in hs_err
    reports and in VM.info
    + JDK-8284767: Create an automated test for JDK-4422535
    + JDK-8285399: JNI exception pending in
    awt_GraphicsEnv.c:1432
    + JDK-8285690: CloneableReference subtest should not
    throw CloneNotSupportedException
    + JDK-8285755: JDK-8285093 changed the default for
  - -with-output-sync
    + JDK-8285835: SIGSEGV in
    PhaseIdealLoop::build_loop_late_post_work
    + JDK-8285919: Remove debug printout from JDK-8285093
    + JDK-8285965: TestScenarios.java does not check for
    "&lt;!-- safepoint while printing --&gt;" correctly
    + JDK-8286030: Avoid JVM crash when containers share the
    same /tmp dir
    + JDK-8286154: Fix 3rd party notices in test files
    + JDK-8286562: GCC 12 reports some compiler warnings
    + JDK-8286694: Incorrect argument processing in java
    launcher
    + JDK-8286705: GCC 12 reports use-after-free potential
    bugs
    + JDK-8286707: JFR: Don't commit JFR internal
    jdk.JavaMonitorWait events
    + JDK-8286800: Assert in PhaseIdealLoop::dump_real_LCA is
    too strong
    + JDK-8286844: com/sun/jdi/RedefineCrossEvent.java failed
    with 1 threads completed while VM suspended
    + JDK-8286873: Improve websocket test execution time
    + JDK-8286962: java/net/httpclient/ServerCloseTest.java
    failed once with ConnectException
    + JDK-8287180: Update IANA Language Subtag Registry to
    Version 2022-08-08
    + JDK-8287217: C2: PhaseCCP: remove not visited nodes,
    prevent type inconsistency
    + JDK-8287491: compiler/jvmci/errors/TestInvalidDebugInfo.java
    fails new assert:  assert((uint)t &lt; T_CONFLICT + 1) failed:
    invalid type #
    + JDK-8287593: ShortResponseBody could be made more
    resilient to rogue connections
    + JDK-8287754: Update jib GNU make dependency on Windows
    to latest cygwin build
    + JDK-8288005: HotSpot build with disabled PCH fails for
    Windows AArch64
    + JDK-8288130: compiler error with AP and explicit record
    accessor
    + JDK-8288332: Tier1 validate-source fails after 8279614
    + JDK-8288415: java/awt/PopupMenu/PopupMenuLocation.java
    is unstable in MacOS machines
    + JDK-8288854: getLocalGraphicsEnvironment() on for
    multi-screen setups throws exception NPE
    + JDK-8289400: Improve com/sun/jdi/TestScaffold error
    reporting
    + JDK-8289440: Remove vmTestbase/nsk/monitoring/MemoryPoolMBean/
    /isCollectionUsageThresholdExceeded/isexceeded003 from
    ProblemList.txt
    + JDK-8289508: Improve test coverage for XPath Axes: ancestor,
    ancestor-or-self, preceding, and preceding-sibling
    + JDK-8289511: Improve test coverage for XPath Axes: child
    + JDK-8289647: AssertionError during annotation
    processing of record related tests
    + JDK-8289948: Improve test coverage for XPath functions:
    Node Set Functions
    + JDK-8290067: Show stack dimensions in UL logging when
    attaching threads
    + JDK-8290083: ResponseBodyBeforeError: AssertionError or
    SSLException: Unsupported or unrecognized SSL message
    + JDK-8290197: test/jdk/java/nio/file/Files/probeContentType/
    /Basic.java fails on some systems for the ".rar" extension
    + JDK-8290322: Optimize Vector.rearrange over byte
    vectors for AVX512BW targets.
    + JDK-8290836: Improve test coverage for XPath functions:
    String Functions
    + JDK-8290837: Improve test coverage for XPath functions:
    Boolean Functions
    + JDK-8290838: Improve test coverage for XPath functions:
    Number Functions
    + JDK-8290850: C2: create_new_if_for_predicate() does not
    clone pinned phi input nodes resulting in a broken graph
    + JDK-8290899: java/lang/String/StringRepeat.java test
    requests too much heap on windows x86
    + JDK-8290964: C2 compilation fails with assert
    "non-reduction loop contains reduction nodes"
    + JDK-8291825: java/time/nontestng/java/time/zone/
    /CustomZoneNameTest.java fails if defaultLocale and
    defaultFormatLocale are different
    + JDK-8292033: Move jdk.X509Certificate event logic to
    JCA layer
    + JDK-8292066: Convert TestInputArgument.sh and
    TestSystemLoadAvg.sh to java version
    + JDK-8292159: TYPE_USE annotations on generic type
    arguments of record components discarded
    + JDK-8292177: InitialSecurityProperty JFR event
    + JDK-8292285: C2: remove unreachable block after
    NeverBranch-to-Goto conversion
    + JDK-8292297: Fix up loading of override java.security
    properties file
    + JDK-8292328: AccessibleActionsTest.java test
    instruction for show popup on JLabel did not specify shift key
    + JDK-8292443: Weak CAS VarHandle/Unsafe tests should
    test always-failing cases
    + JDK-8292602: ZGC: C2 late barrier analysis uses invalid
    dominator information
    + JDK-8292660: C2: blocks made unreachable by
    NeverBranch-to-Goto conversion are removed incorrectly
    + JDK-8292780: misc tests failed "assert(false) failed:
    graph should be schedulable"
    + JDK-8292877: java/util/concurrent/atomic/Serial.java uses
    {Double,Long}Accumulator incorrectly
    + JDK-8293000: Review running times of jshell regression tests
    + JDK-8293326: jdk/sun/security/tools/jarsigner/compatibility/
    /SignTwice.java slow on Windows
    + JDK-8293466: libjsig should ignore non-modifying
    sigaction calls
    + JDK-8293493: Signal Handlers printout should show
    signal block state
    + JDK-8293531: C2: some vectorapi tests fail assert "Not
    monotonic" with flag -XX:TypeProfileLevel=222
    + JDK-8293562: KeepAliveCache Blocks Threads while
    Closing Connections
    + JDK-8293691: converting a defined BasicType value to a
    string should not crash the VM
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8293819: sun/util/logging/PlatformLoggerTest.java
    failed with "RuntimeException: Retrieved backing
    PlatformLogger level null is not the expected CONFIG"
    + JDK-8293965: Code signing warnings after JDK-8293550
    + JDK-8293996: C2: fix and simplify
    IdealLoopTree::do_remove_empty_loop
    + JDK-8294160: misc crash dump improvements
    + JDK-8294217: Assertion failure: parsing found no loops
    but there are some
    + JDK-8294310: compare.sh fails on macos after JDK-8293550
    + JDK-8294378: URLPermission constructor exception when
    using tr locale
    + JDK-8294538: missing is_unloading() check in
    SharedRuntime::fixup_callers_callsite()
    + JDK-8294548: Problem list SA core file tests on
    macosx-x64 due to JDK-8294316
    + JDK-8294580: frame::interpreter_frame_print_on()
    crashes if free BasicObjectLock exists in frame
    + JDK-8294677: chunklevel::MAX_CHUNK_WORD_SIZE too small
    for some applications
    + JDK-8294705: Disable an assertion in test/jdk/java/util/
    /DoubleStreamSums/CompensatedSums.java
    + JDK-8294902: Undefined Behavior in C2 regalloc with
    null references
    + JDK-8294947: Use 64bit atomics in patch_verified_entry
    on x86_64
    + JDK-8294958: java/net/httpclient/ConnectTimeout tests
    are slow
    + JDK-8295000: java/util/Formatter/Basic test cleanup
    + JDK-8295066: Folding of loads is broken in C2 after
    JDK-8242115
    + JDK-8295116: C2: assert(dead-&gt;outcnt() == 0 &amp;&amp;
    !dead-&gt;is_top()) failed: node must be dead
    + JDK-8295211: Fix autoconf 2.71 warning
    "AC_CHECK_HEADERS: you should use literals"
    + JDK-8295413: com/sun/jdi/EATests.java fails with
    compiler flag -XX:+StressReflectiveCode
    + JDK-8295414: [Aarch64] C2: assert(false) failed: bad AD
    file
    + JDK-8295530: Update Zlib Data Compression Library to
    Version 1.2.13
    + JDK-8295685: Update Libpng to 1.6.38
    + JDK-8295724: VirtualMachineError: Out of space in
    CodeCache for method handle intrinsic
    + JDK-8298947: compiler/codecache/
    /MHIntrinsicAllocFailureTest.java fails intermittently
    + JDK-8295774: Write a test to verify List sends
    ItemEvent/ActionEvent
    + JDK-8295777: java/net/httpclient/ConnectExceptionTest.java
    should not rely on system resolver
    + JDK-8295788: C2 compilation hits "assert((mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) ||
    !use-&gt;is_reachable_from_root()) failed: missed a node"
    + JDK-8296136: Use correct register in
    aarch64_enc_fast_unlock()
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296329: jar validator doesn't account for minor
    class file version
    + JDK-8296389: C2: PhaseCFG::convert_NeverBranch_to_Goto
    must handle both orders of successors 8298568: Fastdebug
    build fails after JDK-8296389
    + JDK-8296548: Improve MD5 intrinsic for x86_64
    + JDK-8296611: Problemlist several sun/security tests
    until JDK-8295343 is resolved
    + JDK-8296619: Upgrade jQuery to 3.6.1
    + JDK-8296675: Exclude linux-aarch64 in NSS tests
    + JDK-8296878: Document Filter attached to JPasswordField
    and setText("") is not cleared instead inserted characters
    replaced with unicode null characters
    + JDK-8296904: Improve handling of macos xcode toolchain
    + JDK-8296912: C2: CreateExNode::Identity fails with
    assert(i &lt; _max) failed: oob: i=1, _max=1
    + JDK-8296924: C2:
    assert(is_valid_AArch64_address(dest.target())) failed: bad
    address
    + JDK-8297088: Update LCMS to 2.14
    + JDK-8297211: Expensive fillInStackTrace operation in
    HttpURLConnection.getOutputStream0 when no content-length in
    response
    + JDK-8297259: Bump update version for OpenJDK: jdk-17.0.7
    + JDK-8297264: C2: Cast node is not processed again in
    CCP and keeps a wrong too narrow type which is later replaced
    by top
    + JDK-8297431: [JVMCI] HotSpotJVMCIRuntime.encodeThrowable
    should not throw an exception
    + JDK-8297437: javadoc cannot link to old docs (with old
    style anchors)
    + JDK-8297480: GetPrimitiveArrayCritical in imageioJPEG
    misses result - NULL check
    + JDK-8297489: Modify TextAreaTextEventTest.java as to
    verify the content change of TextComponent sends TextEvent
    + JDK-8297523: Various GetPrimitiveArrayCritical miss
    result - NULL check
    + JDK-8297569: URLPermission constructor throws
    IllegalArgumentException: Invalid characters in hostname
    after JDK-8294378
    + JDK-8297642: PhaseIdealLoop::only_has_infinite_loops
    must detect all loops that never lead to termination
    + JDK-8297951: C2: Create skeleton predicates for all If
    nodes in loop predication
    + JDK-8297959: Provide better descriptions for some
    Operating System JFR events
    + JDK-8297963: Partially fix string expansion issues in
    UTIL_DEFUN_NAMED and related macros
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298035: Provide better descriptions for JIT
    compiler JFR events
    + JDK-8298073: gc/metaspace/
    /CompressedClassSpaceSizeInJmapHeap.java causes test task
    timeout on macosx
    + JDK-8241293: CompressedClassSpaceSizeInJmapHeap.java time out
    after 8 minutes
    + JDK-8298093: improve cleanup and error handling of
    awt_parseColorModel in awt_parseImage.c
    + JDK-8298108: Add a regression test for JDK-8297684
    + JDK-8298129: Let checkpoint event sizes grow beyond u4
    limit
    + JDK-8298271: java/security/SignedJar/spi-calendar-provider/
    /TestSPISigned.java failing on Windows
    + JDK-8298459: Fix msys2 linking and handling out of tree
    build directory for source zip creation
    + JDK-8298472: AArch64: Detect Ampere-1 and Ampere-1A
    CPUs and set default options
    + JDK-8298527: Cygwin's uname -m returns different string
    than before
    + JDK-8298588: WebSockets: HandshakeUrlEncodingTest
    unnecessarily depends on a response body
    + JDK-8298649: JFR: RemoteRecordingStream support for
    checkpoint event sizes beyond u4
    + JDK-8298726: (fs) Change PollingWatchService to record
    last modified time as FileTime rather than milliseconds
    + JDK-8299015: Ensure that
    HttpResponse.BodySubscribers.ofFile writes all bytes
    + JDK-8299018: java/net/httpclient/HttpsTunnelAuthTest.java
    fails with java.io.IOException: HTTP/1.1 header parser
    received no bytes
    + JDK-8299194: CustomTzIDCheckDST.java may fail at future
    date
    + JDK-8299296: Write a test to verify the components
    selection sends ItemEvent
    + JDK-8299388: java/util/regex/NegativeArraySize.java
    fails on Alpine and sometimes Windows
    + JDK-8299424: containers/docker/TestMemoryWithCgroupV1.java
    fails on SLES12 ppc64le when testing Memory and Swap Limit
    + JDK-8299439: java/text/Format/NumberFormat/
    /CurrencyFormat.java fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8299470: sun/jvm/hotspot/SALauncher.java handling
    of negative rmiport args
    + JDK-8299497: Usage of constructors of primitive wrapper
    classes should be avoided in java.desktop API docs
    + JDK-8299520: TestPrintXML.java output error messages in
    case compare fails
    + JDK-8299597: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.7
    + JDK-8299657: sun/tools/jhsdb/SAGetoptTest.java fails
    after 8299470
    + JDK-8299671: Speed up compiler/intrinsics/string/
    /TestStringLatin1IndexOfChar.java
    + JDK-8299789: Compilation of gtest causes build to fail
    if runtime libraries are in different dirs
    + JDK-8299957: Enhance error logging in instrument coding
    with additional jplis_assert_msg
    + JDK-8299970: Speed up compiler/arraycopy/
    /TestArrayCopyConjoint.java
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can
    report invalid results on 32 bit systems
    + JDK-8300205: Swing test bug8078268 make latch timeout
    configurable
    + JDK-8300266: Detect Virtualization on Linux aarch64
    + JDK-8300490: Spaces in name of MacOS Code Signing
    Identity are not correctly handled after JDK-8293550
    + JDK-8300590: [JVMCI] BytecodeFrame.equals is broken
    + JDK-8300642: [17u,11u] Fix
    DEFAULT_PROMOTED_VERSION_PRE=ea for -dev
    + JDK-8300692: GCC 12 reports some compiler warnings in
    bundled freetype
    + JDK-8300751: [17u] Remove duplicate entry in
    javac.properties
    + JDK-8300773: Address the inconsistency between the
    constant array and pool size
    + JDK-8301170: perfMemory_windows.cpp add
    free_security_attr to early returns
    + JDK-8301342: Prefer ArrayList to LinkedList in
    LayoutComparator
    + JDK-8301397: [11u, 17u] Bump jtreg to fix issue with
    build JDK 11.0.18
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8301842: JFR: increase checkpoint event size for
    stacktrace and string pool
    + JDK-8302152: Speed up tests with infinite loops, sleep
    less
    + JDK-8302692: [17u] Update GHA Boot JDK to 17.0.6
    + JDK-8302879: doc/building.md update link to jtreg builds
    + JDK-8304871: Use default visibility for static library
    builds
- Modified patch:
  * fips.patch
    + refetch from git repository with our changes merged in
- Added patch:
  * JDK-8303509.patch
    + upstream fix for JDK-8303509, bsc#1209333: Socket
    setTrafficClass does not work for IPv4 connections when IPv6
    is enabled</changelog>
  <changelog author="fstrba@suse.com" date="1683806400">- Do not install a separate nss.fips.cfg file, since there is
  now one in the tree and the install happens automatically
- Modified patch:
  * fips.patch
    + enable system property file by default, without which the
    FIPS mode would never get enabled (bsc#1211259)</changelog>
  <changelog author="jsilva@suse.com" date="1683806401">- Fix for SG#65673, bsc#1210392:
  * unsigned-sni-server-name.patch: In SSLSessionImpl, interpret
    length of SNIServerName as an unsigned byte so that it can
    have length up to 255 rather than 127.</changelog>
  <changelog author="fstrba@suse.com" date="1684929600">- Bring back our nss.fips.cfg file, since the variable expansion
  in the upstream file does not work (fixes: bsc#1211679)</changelog>
  <changelog author="fstrba@suse.com" date="1690286400">- Update to upstream tag jdk-17.0.8+7 (July 2023 CPU)
  * CVEs
    + CVE-2023-22006, bsc#1213473
    + CVE-2023-22036, bsc#1213474
    + CVE-2023-22041, bsc#1213475
    + CVE-2023-22044, bsc#1213479
    + CVE-2023-22045, bsc#1213481
    + CVE-2023-22049, bsc#1213482
    + CVE-2023-25193, bsc#1207922
  * Security fixes
    + JDK-8294323: Improve Shared Class Data
    + JDK-8296565: Enhanced archival support
    + JDK-8298676, JDK-8300891: Enhanced Look and Feel
    + JDK-8300285: Enhance TLS data handling
    + JDK-8300596: Enhance Jar Signature validation
    + JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1
    + JDK-8302475: Enhance HTTP client file downloading
    + JDK-8302483: Enhance ZIP performance
    + JDK-8303376: Better launching of JDI
    + JDK-8304460: Improve array usages
    + JDK-8304468: Better array usages
    + JDK-8305312: Enhanced path handling
    + JDK-8308682: Enhance AES performance
  * Other changes
    + JDK-8178806: Better exception logging in crypto code
    + JDK-8201516: DebugNonSafepoints generates incorrect
    information
    + JDK-8224768: Test ActalisCA.java fails
    + JDK-8227060: Optimize safepoint cleanup subtask order
    + JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java
    fails with AssertionError
    + JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel
    + JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java
    doesn' initialize eName
    + JDK-8245877: assert(_value != __null) failed: resolving NULL
    _value in JvmtiExport::post_compiled_method_load
    + JDK-8248001: javadoc generates invalid HTML pages whose
    ftp:// links are broken
    + JDK-8252990: Intrinsify Unsafe.storeStoreFence
    + JDK-8254711: Add java.security.Provider.getService JFR Event
    + JDK-8257856: Make ClassFileVersionsTest.java robust to JDK
    version updates
    + JDK-8261495: Shenandoah: reconsider update references memory
    ordering
    + JDK-8268288: jdk/jfr/api/consumer/streaming/
    /TestOutOfProcessMigration.java fails with "Error:
    ShouldNotReachHere()"
    + JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java
    fails: unexpected log message
    + JDK-8268582: javadoc throws NPE with --ignore-source-errors
    option
    + JDK-8269821: Remove is-queue-active check in inner loop of
    write_ref_array_pre_work
    + JDK-8270434: JDI+UT: Unexpected event in JDI tests
    + JDK-8270859: Post JEP 411 refactoring: client libs with
    maximum covering &gt; 10K
    + JDK-8270869: G1ServiceThread may not terminate
    + JDK-8271519: java/awt/event/SequencedEvent/
    /MultipleContextsFunctionalTest.java failed with "Total [200]
  - Expected [400]"
    + JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can
    still fail with "ERROR: new event is not ThreadStartEvent"
    + JDK-8274243: Implement fast-path for ASCII-compatible
    CharsetEncoders on aarch64
    + JDK-8274615: Support relaxed atomic add for linux-aarch64
    + JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile
    + JDK-8275233: Incorrect line number reported in exception
    stack trace thrown from a lambda expression
    + JDK-8275287: Relax memory ordering constraints on updating
    instance class and array class counters
    + JDK-8275721: Name of UTC timezone in a locale changes
    depending on previous code
    + JDK-8275735: [linux] Remove deprecated Metrics api (kernel
    memory limit)
    + JDK-8276058: Some swing test fails on specific CI macos system
    + JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/
    /bug6276188.java fails to compile after JDK-8276058
    + JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java -
    add 4357905
    + JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly
    identify it as pause
    + JDK-8278434: timeouts in test  java/time/test/java/time/
    /format/TestZoneTextPrinterParser.java
    + JDK-8278834: Error "Cannot read field "sym" because
    "this.lvar[od]" is null" when compiling
    + JDK-8282077: PKCS11 provider C_sign() impl should handle
    CKR_BUFFER_TOO_SMALL error
    + JDK-8282201: Consider removal of expiry check in
    VerifyCACerts.java test
    + JDK-8282227: Locale information for nb is not working properly
    + JDK-8282704: runtime/Thread/StopAtExit.java may leak memory
    + JDK-8283057: Update GCC to version 11.2.0 for Oracle builds
    on Linux
    + JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2
    + JDK-8283520: JFR: Memory leak in dcmd_arena
    + JDK-8283566: G1: Improve G1BarrierSet::enqueue performance
    + JDK-8284331: Add sanity check for signal handler modification
    warning.
    + JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java
    failed with Default Button not pressed for L&amp;F:
    com.sun.java.swing.plaf.motif.MotifLookAndFeel
    + JDK-8285987: executing shell scripts without #! fails on
    Alpine linux
    + JDK-8286191: misc tests fail due to JDK-8285987
    + JDK-8286287: Reading file as UTF-16 causes Error which
    "shouldn't happen"
    + JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator
    + JDK-8286346: 3-parameter version of AllocateHeap should not
    ignore AllocFailType
    + JDK-8286398: Address possibly lossy conversions in
    jdk.internal.le
    + JDK-8287007: [cgroups] Consistently use stringStream
    throughout parsing code
    + JDK-8287246: DSAKeyValue should check for missing params
    instead of relying on KeyFactory provider
    + JDK-8287541: Files.writeString fails to throw IOException for
    charset "windows-1252"
    + JDK-8287854: Dangling reference in ClassVerifier::verify_class
    + JDK-8287876: The recently de-problemlisted
    TestTitledBorderLeak test is unstable
    + JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md
    with information on 4th party dependencies
    + JDK-8288589: Files.readString ignores encoding errors for
    UTF-16
    + JDK-8289509: Improve test coverage for XPath Axes:
    descendant, descendant-or-self, following, following-sibling
    + JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space
    + JDK-8289949: Improve test coverage for XPath: operators
    + JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is
    subject to undefined behavior
    + JDK-8291226: Create Test Cases to cover scenarios for
    JDK-8278067
    + JDK-8291637: HttpClient default keep alive timeout not
    followed if server sends invalid value
    + JDK-8291638: Keep-Alive timeout of 0 should close connection
    immediately
    + JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage()
    is lower than expected
    + JDK-8292301: [REDO v2] C2 crash when allocating array of size
    too large
    + JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests
    resilience under spurious failures
    + JDK-8292713: Unsafe.allocateInstance should be intrinsified
    without UseUnalignedAccesses
    + JDK-8292755: Non-default method in interface leads to a stack
    overflow in JShell
    + JDK-8292990: Improve test coverage for XPath Axes: parent
    + JDK-8293295: Add type check asserts to
    java_lang_ref_Reference accessors
    + JDK-8293492: ShenandoahControlThread missing from hs-err log
    and thread dump
    + JDK-8293858: Change PKCS7 code to use default SecureRandom
    impl instead of SHA1PRNG
    + JDK-8293887: AArch64 build failure with GCC 12 due to
    maybe-uninitialized warning in libfdlibm k_rem_pio2.c
    + JDK-8294183: AArch64: Wrong macro check in
    SharedRuntime::generate_deopt_blob
    + JDK-8294281: Allow warnings to be disabled on a per-file basis
    + JDK-8294673: JFR: Add SecurityProviderService#threshold to
    TestActiveSettingEvent.java
    + JDK-8294717: (bf) DirectByteBuffer constructor will leak if
    allocating Deallocator or Cleaner fails with OOME
    + JDK-8294906: Memory leak in PKCS11 NSS TLS server
    + JDK-8295564: Norwegian Nynorsk Locale is missing formatting
    + JDK-8295974: jni_FatalError and Xcheck:jni warnings should
    print the native stack when there are no Java frames
    + JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java
    fails intermittently on a VM
    + JDK-8296318: use-def assert: special case undetected loops
    nested in infinite loops
    + JDK-8296343: CPVE thrown on missing content-length in OCSP
    response
    + JDK-8296412: Special case infinite loops with unmerged
    backedges in IdealLoopTree::check_safepts
    + JDK-8296545: C2 Blackholes should allow load optimizations
    + JDK-8296934: Write a test to verify whether Undecorated Frame
    can be iconified or not
    + JDK-8297000: [jib] Add more friendly warning for proxy issues
    + JDK-8297154: Improve safepoint cleanup logging
    + JDK-8297450: ScaledTextFieldBorderTest.java fails when run
    with -show parameter
    + JDK-8297587: Upgrade JLine to 3.22.0
    + JDK-8297730: C2: Arraycopy intrinsic throws incorrect
    exception
    + JDK-8297955: LDAP CertStore should use LdapName and not
    String for DNs
    + JDK-8298488: [macos13] tools/jpackage tests failing with
    "Exit code: 137" on macOS
    + JDK-8298887: On the latest macOS+XCode the Robot API may
    report wrong colors
    + JDK-8299179: ArrayFill with store on backedge needs to reduce
    length by 1
    + JDK-8299259: C2: Div/Mod nodes without zero check could be
    split through iv phi of loop resulting in SIGFPE
    + JDK-8299544: Improve performance of CRC32C intrinsics
    (non-AVX-512) for small inputs
    + JDK-8299570: [JVMCI] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8299959: C2: CmpU::Value must filter overflow computation
    against local sub computation
    + JDK-8300042: Improve CPU related JFR events descriptions
    + JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy
    due to constant NULL src argument
    + JDK-8300823: UB: Compile::_phase_optimize_finished is
    initialized too late
    + JDK-8300939: sun/security/provider/certpath/OCSP/
    /OCSPNoContentLength.java fails due to network errors
    + JDK-8301050: Detect Xen Virtualization on Linux aarch64
    + JDK-8301119: Support for GB18030-2022
    + JDK-8301123: Enable Symbol refcounting underflow checks in
    PRODUCT
    + JDK-8301190: [vectorapi] The typeChar of LaneType is
    incorrect when default locale is tr
    + JDK-8301216: ForkJoinPool invokeAll() ignores timeout
    + JDK-8301338: Identical branch conditions in
    CompileBroker::print_heapinfo
    + JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic
    called with negative character argument
    + JDK-8301637: ThreadLocalRandom.current().doubles().parallel()
    contention
    + JDK-8301661: Enhance os::pd_print_cpu_info on macOS and
    Windows
    + JDK-8302151: BMPImageReader throws an exception reading BMP
    images
    + JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined
    must respect ForceInline
    + JDK-8302320: AsyncGetCallTrace obtains too few frames in
    sanity test
    + JDK-8302491: NoClassDefFoundError omits the original cause of
    an error
    + JDK-8302508: Add timestamp to the output TraceCompilerThreads
    + JDK-8302594: use-after-free in Node::destruct
    + JDK-8302595: use-after-free related to GraphKit::clone_map
    + JDK-8302791: Add specific ClassLoader object to Proxy
    IllegalArgumentException message
    + JDK-8302849: SurfaceManager might expose partially
    constructed object
    + JDK-8303069: Memory leak in CompilerOracle::parse_from_line
    + JDK-8303102: jcmd: ManagementAgent.status truncates the text
    longer than O_BUFLEN
    + JDK-8303130: Document required Accessibility permissions on
    macOS
    + JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m
    needs CFRelease call in early potential CHECK_NULL return
    + JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8
    + JDK-8303440: The "ZonedDateTime.parse" may not accept the
    "UTC+XX" zone id
    + JDK-8303465: KeyStore of type KeychainStore, provider Apple
    does not show all trusted certificates
    + JDK-8303476: Add the runtime version in the release file of a
    JDK image
    + JDK-8303482: Update LCMS to 2.15
    + JDK-8303508: Vector.lane() gets wrong value on x86
    + JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during
    unrolling
    + JDK-8303564: C2: "Bad graph detected in build_loop_late"
    after a CMove is wrongly split thru phi
    + JDK-8303575: adjust Xen handling on Linux aarch64
    + JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs
    CFRelease call in early potential CHECK_NULL return
    + JDK-8303588: [JVMCI] make JVMCI source directories conform
    with standard layout
    + JDK-8303809: Dispose context in SPNEGO NegotiatorImpl
    + JDK-8303822: gtestMain should give more helpful output
    + JDK-8303861: Error handling step timeouts should never be
    blocked by OnError and others
    + JDK-8303937: Corrupted heap dumps due to missing retries for
    os::write()
    + JDK-8303949: gcc10 warning Linux ppc64le - note: the layout
    of aggregates containing vectors with 8-byte alignment has
    changed in GCC 5
    + JDK-8304054: Linux: NullPointerException from
    FontConfiguration.getVersion in case no fonts are installed
    + JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java
    fails when checking LD_LIBRARY_PATH
    + JDK-8304134: jib bootstrapper fails to quote filename when
    checking download filetype
    + JDK-8304291: [AIX] Broken build after JDK-8301998
    + JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998
    + JDK-8304350: Font.getStringBounds calculates wrong width for
    TextAttribute.TRACKING other than 0.0
    + JDK-8304671: javac regression: Compilation with --release 8
    fails on underscore in enum identifiers
    + JDK-8304683: Memory leak in WB_IsMethodCompatible
    + JDK-8304760: Add 2 Microsoft TLS roots
    + JDK-8304867: Explicitly disable dtrace for ppc builds
    + JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with
    ZGC
    + JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic
    + JDK-8305113: (tz) Update Timezone Data to 2023c
    + JDK-8305400: ISO 4217 Amendment 175 Update
    + JDK-8305403: Shenandoah evacuation workers may deadlock
    + JDK-8305481: gtest is_first_C_frame failing on ARM
    + JDK-8305690: [X86] Do not emit two REX prefixes in
    Assembler::prefix
    + JDK-8305711: Arm: C2 always enters slowpath for monitorexit
    + JDK-8305721: add `make compile-commands` artifacts to
    .gitignore
    + JDK-8305975: Add TWCA Global Root CA
    + JDK-8305993: Add handleSocketErrorWithMessage to extend nio
    Net.c exception message
    + JDK-8305994: Guarantee eventual async monitor deflation
    + JDK-8306072: Open source several AWT MouseInfo related tests
    + JDK-8306133: Open source few AWT Drag &amp; Drop related tests
    + JDK-8306409: Open source AWT KeyBoardFocusManger,
    LightWeightComponent related tests
    + JDK-8306432: Open source several AWT Text Component related
    tests
    + JDK-8306466: Open source more AWT Drag &amp; Drop related tests
    + JDK-8306489: Open source AWT List related tests
    + JDK-8306543: GHA: MSVC installation is failing
    + JDK-8306640: Open source several AWT TextArea related tests
    + JDK-8306652: Open source AWT MenuItem related tests
    + JDK-8306658: GHA: MSVC installation could be optional since
    it might already be pre-installed
    + JDK-8306664: GHA: Update MSVC version to latest stepping
    + JDK-8306681: Open source more AWT DnD related tests
    + JDK-8306683: Open source several clipboard and color AWT tests
    + JDK-8306752: Open source several container and component AWT
    tests
    + JDK-8306753: Open source several container AWT tests
    + JDK-8306755: Open source few Swing JComponent and
    AbstractButton tests
    + JDK-8306768: CodeCache Analytics reports wrong threshold
    + JDK-8306774: Make runtime/Monitor/
    /GuaranteedAsyncDeflationIntervalTest.java more reliable
    + JDK-8306825: Monitor deflation might be accidentally disabled
    by zero intervals
    + JDK-8306850: Open source AWT Modal related tests
    + JDK-8306871: Open source more AWT Drag &amp; Drop tests
    + JDK-8306883: Thread stacksize is reported with wrong units in
    os::create_thread logging
    + JDK-8306941: Open source several datatransfer and dnd AWT
    tests
    + JDK-8306943: Open source several dnd AWT tests
    + JDK-8306954: Open source five Focus related tests
    + JDK-8306955: Open source several JComboBox jtreg tests
    + JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep
    + JDK-8306996: Open source Swing MenuItem related tests
    + JDK-8307080: Open source some more JComboBox jtreg tests
    + JDK-8307128: Open source some drag and drop tests 4
    + JDK-8307130: Open source few Swing JMenu tests
    + JDK-8307133: Open source some JTable jtreg tests
    + JDK-8307134: Add GTS root CAs
    + JDK-8307135: java/awt/dnd/NotReallySerializableTest/
    /NotReallySerializableTest.java failed
    + JDK-8307331: Correctly update line maps when class redefine
    rewrites bytecodes
    + JDK-8307346: Add missing gc+phases logging for
    ObjectCount(AfterGC) JFR event collection code
    + JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could
    leave files owned by root on macOS
    + JDK-8307378: Allow collectors to provide specific values for
    GC notifications' actions
    + JDK-8307381: Open Source JFrame, JIF related Swing Tests
    + JDK-8307425: Socket input stream read burns CPU cycles with
    back-to-back poll(0) calls
    + JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has
    invalid jtreg `@requires` clause
    + JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not
    removed from ExternalEditorTest
    + JDK-8308880: [17u] micro bench ZoneStrings missed in backport
    of 8278434
    + JDK-8308884: [17u/11u] Backout JDK-8297951
    + JDK-8311467: [17u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8</changelog>
</package>
<package pkgid="995f66ffdb0356022bdfda3c028133308441c4227e92bc473a5a2efa9cd13f54" name="java-1_8_0-ibm" arch="src">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="ed2c1add3189eb9f7f18b81ce27f7394320c543a2453e72772b5ca335188b79a" name="java-1_8_0-ibm" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="4bf4e1acdb63512e281942e025fbe748e3326bc6f529bb4d599a97b3b3a6b04b" name="java-1_8_0-ibm" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="9a5696eb9673e6dabdfc02a6f8e71e1530b3f34dbed672176053c5b796c6a8f3" name="java-1_8_0-ibm" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="fbbe9863347d0534e2f2ed99671c6f29dad0df40e6ebaaabbd86579eac1626f3" name="java-1_8_0-ibm" arch="src">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="ad4cb5088d9bf25329c7af08ae96c9c8a437bed9f9c914546ea809ca307d625c" name="java-1_8_0-ibm" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="a000d53770ecab871910d6ba580dc4ee3268f721d9ce8d1633415697f5e86563" name="java-1_8_0-ibm" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="4eb9483f4764b4dc1c5c5ac20323fe37c074d4b37131ca47a8b1638f1e2c50d4" name="java-1_8_0-ibm" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="46865e76c21ad070b9de2ea3084d30ca8146858f506b911db65d2ab001bd086f" name="java-1_8_0-ibm-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="69e624c89b3abb6f16be6c7d37a1f10763bb6e15edb1a2be8b3f9aa0e115a3b3" name="java-1_8_0-ibm-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="57b80b7c65f32c20f941c8ca21bcd8c58c51bcf095edba693884f15bfb7d262d" name="java-1_8_0-ibm-alsa" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="d537a640c5749b7293d19c612d250077d1709c7d1faeab0ba6961ac389e0e05e" name="java-1_8_0-ibm-alsa" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="e6767dadbe68ad631724f62194b587d465cdfcf0905f629b18274cdf777e6575" name="java-1_8_0-ibm-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="130b9462cd79c8027a30a94425d73e4ae771da86c2ad9f653b54d206f742fe7e" name="java-1_8_0-ibm-demo" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="11cce560443a226a45aafa970602b00e3acd19baea226e157dcaf41adf06d2a0" name="java-1_8_0-ibm-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="a02bb9a95537017a4e0600b5511c9b8ab8581e28e42d9a5e494b2aba695ed140" name="java-1_8_0-ibm-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="6f1dbda9a60f1a614bb42aa03e570cb9ad7ed243b51d2e35348a09bfa3210e65" name="java-1_8_0-ibm-demo" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="ebaabc1ce12bfaa88cad3a0dc95908c13fef1a2352322fe2e516e8f624afb543" name="java-1_8_0-ibm-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="abfb51e2bd89c7b6dbb8e47a1a15d7b1b10cddff0cf0b2df3a3b2d011754f7c3" name="java-1_8_0-ibm-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="5073767876d0303728debdba7e6ea61c8581bb28ab0869f48e506f806b4df208" name="java-1_8_0-ibm-devel" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="1f0c569eb160e03ae311d46c3fa8b41235b7de4943f9b25c99ba30cbddb052c3" name="java-1_8_0-ibm-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="35e2e661ca3402649148dee682e0bebf6943ca8b366e304a1cb1ff83749eb439" name="java-1_8_0-ibm-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="6f1577102522007ceb9576207b199f5471fba084e49b0e02f5fc8a8c4a25c0d8" name="java-1_8_0-ibm-devel" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="d43f781856f49a72a25a0af4af0237f86b9a9999de597965f7a6d1e1c9059d87" name="java-1_8_0-ibm-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="b761d22d4d9766b324d791132f00b62ce1f605c6eccf023e9cc95b92b98391c4" name="java-1_8_0-ibm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="471795259c2a984f7b3665651bd782de46b36f8eac7eee45c271d3f988ae586e" name="java-1_8_0-ibm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="38f3131e822807929ab9b3581cccfe21c1fad851863546da237b8c7e7cfbf340" name="java-1_8_0-ibm-plugin" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="e238b044f677e28fcc2a80313507142b60a9b46cc82eeea2d3f5858f1a100944" name="java-1_8_0-ibm-plugin" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="f6824c604937b8c6495823162b8916e99318f1a4c35846c7b974230482aaac4c" name="java-1_8_0-ibm-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="22aee178b7e429c4485a7b8e1a389157398825333916f366aea2456344610da7" name="java-1_8_0-ibm-src" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="cc58d5f3b8b880a344c0f94d32043e21290ebc9850bb186bab39fe2e1c6a1c69" name="java-1_8_0-ibm-src" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="c7f785abf4c2bf52266874ead59759bf98de71b8e31b0fc30cc07ed61fdd1d94" name="java-1_8_0-ibm-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="e76af951e1f12786ca1e5669a45c9b997b488cb41452ecd8ffa3c24762786c02" name="java-1_8_0-ibm-src" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="7d5a5c13caf2e7bc1eccebecf1896c37093cbc2b342d25183bbade11626d88fd" name="java-1_8_0-ibm-src" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.6" rel="150000.3.77.1"/>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to Java 8.0 Service Refresh 8 Fix Pack 6 [bsc#1213000]
  * Defect Fixes:
  - Java Virtual Machine: outofmemory (OOM) killer terminates
    the jvm due to failure in control groups detection.</changelog>
</package>
<package pkgid="0559e3c5efd44d320a2623a3a95312f6b6f07cf299139b9b4cc786b5bc5c9de3" name="java-1_8_0-openjdk" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
 